[wp-trac] Re: [WordPress Trac] #9650: attribute_escape() shortcuts

[WordPress Trac]

#9650: attribute_escape() shortcuts
---------------------------+------------------------------------------------
 Reporter:  ryan           |        Type:  defect (bug)
   Status:  new            |    Priority:  normal      
Milestone:  Unassigned     |   Component:  Formatting  
  Version:                 |    Severity:  normal      
 Keywords:  security i18n  |  
---------------------------+------------------------------------------------
Description changed by ryan:

Old description:

> attribute_escape() is often forgotten on value attributes, especially on
> translated messages.  Maybe some shortcuts would improve adoption. Use
> esc() as shorthand for atribute_escape() and add _e_esc() and _t_esc()
> which run translations through attribute_escape(), thus avoiding the need
> to do this: echo attribute_escape( __('Translated string') )

New description:

 attribute_escape() is often forgotten on value attributes, especially on
 translated messages.  Maybe some shortcuts would improve adoption. Use
 esc() as shorthand for atribute_escape() and add _e_esc() and _t_esc()
 which run translations through attribute_escape(), thus avoiding the need
 to do this: echo attribute_escape( !__('Translated string') )

--

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9650#comment:2>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software