[wp-trac] [WordPress Trac] #6598: 2.5 escapes widget names

WordPress Trac wp-trac at lists.automattic.com
Sat Apr 5 08:28:43 GMT 2008


#6598: 2.5 escapes widget names
---------------------+------------------------------------------------------
 Reporter:  omry     |       Owner:  anonymous
     Type:  defect   |      Status:  new      
 Priority:  normal   |   Milestone:  2.7      
Component:  General  |     Version:  2.5      
 Severity:  normal   |    Keywords:           
---------------------+------------------------------------------------------
 My FireStast widgets used to have an image tag with a small FireStats icon
 to make them easily identified.[[BR]]
 now that 2.5 started to escape the widget names, this no longer works.

 Since the code that adds widgets to WP is already privileged code that can
 do whatever it wants, I don't think that escaping the names is adding any
 kind of protection.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/6598>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list