[wp-trac] [WordPress Trac] #22931: Use double quotes for attribute values when loading JS in script-loader.php

WordPress Trac noreply at wordpress.org
Fri Dec 14 08:04:09 UTC 2012


#22931: Use double quotes for attribute values when loading JS in script-loader.php
--------------------------+----------------------
 Reporter:  gish          |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  General       |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |
--------------------------+----------------------
Changes (by nacin):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Replying to [comment:1 dd32]:
 > The HTML5 standard accept 3 different formats:

 Just adding that our own standards require either single or double quotes,
 and that no quotes is a big no-no for security reasons.
 (http://www.wonko.com/post/html-escaping)

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/22931#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list