[wp-trac] [WordPress Trac] #58902: add_query_arg() should esc_url_raw() REQUEST_URI

WordPress Trac noreply at wordpress.org
Wed Aug 30 10:09:16 UTC 2023


#58902: add_query_arg() should esc_url_raw() REQUEST_URI
-------------------------------------------------+-------------------------
 Reporter:  jorbin                               |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  6.4
Component:  Formatting                           |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-testing-info has-      |     Focuses:
  unit-tests                                     |
-------------------------------------------------+-------------------------

Comment (by SergeyBiryukov):

 Replying to [comment:5 SergeyBiryukov]:
 > Since `esc_url_raw()` is a wrapper for `sanitize_url()`, could we use
 the latter directly here?
 >
 > All of the other instances in core were replaced in [53455] / #55852,
 except for two that accidentally snuck in later.

 Created a ticket for those: #59247.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58902#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list