[wp-trac] [WordPress Trac] #58336: Potential XSS on admin_body_class hook

WordPress Trac noreply at wordpress.org
Fri May 26 00:46:00 UTC 2023


#58336: Potential XSS on admin_body_class hook
--------------------------+-----------------------------
 Reporter:  rafiem        |       Owner:  SergeyBiryukov
     Type:  defect (bug)  |      Status:  reopened
 Priority:  normal        |   Milestone:  6.3
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+-----------------------------

Comment (by SergeyBiryukov):

 Replying to [comment:10 johnbillion]:
 > we do need to discuss the overall approach to escaping filtered values.

 Thanks for bringing this up, there were a few related discussions
 recently:
 * comment:17:ticket:58251
 * comment:3:ticket:58303
 * comment:3:ticket:58305

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58336#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list