[wp-trac] [WordPress Trac] #54182: Use wp_unslash() for $_REQUEST Parameter in wp-admin/admin-post.php file

WordPress Trac noreply at wordpress.org
Sat Sep 25 22:05:42 UTC 2021


#54182: Use wp_unslash() for $_REQUEST Parameter in wp-admin/admin-post.php file
---------------------------+-----------------------------------------------
 Reporter:  yagniksangani  |       Owner:  (none)
     Type:  enhancement    |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  General        |     Version:  5.8.1
 Severity:  normal         |  Resolution:
 Keywords:  reporter-      |     Focuses:  administration, coding-standards
  feedback                 |
---------------------------+-----------------------------------------------
Changes (by SergeyBiryukov):

 * keywords:   => reporter-feedback


Old description:

> Need to use the wp_unslash() for $_REQUEST['action'], you can see
> screenshot.

New description:

 Need to use the `wp_unslash()` for `$_REQUEST['action']`, you can see
 screenshot.

--

Comment:

 Hi there, welcome back to WordPress Trac! Thanks for the report.

 Could you provide some more details about why `wp_unslash()` is needed
 here? What would be the steps to reproduce the issue on a clean install?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54182#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list