[wp-trac] [WordPress Trac] #11040: escaped HTML elements present in title attributes generated by wp_​list_​pages() (was: esc_attr() doesn't strip HTML tags)

[WordPress Trac]

#11040: escaped HTML elements present in title attributes generated by
wp_​list_​pages()
--------------------------+-------------------------------------------------
  Reporter:  kingjeffrey  |        Type:  defect (bug)
    Status:  reopened     |    Priority:  normal      
 Milestone:               |   Component:  Formatting  
   Version:               |    Severity:  normal      
Resolution:               |    Keywords:  needs-patch 
--------------------------+-------------------------------------------------
Changes (by kingjeffrey):

  * status:  closed => reopened
  * resolution:  wontfix =>


Comment:

 It is great that you settled on `esc_attr()` not stripping tags.  But my
 original submission had a specific case in the core of WP that is
 improper.  Escaped tags should not be included in the title attribute for
 `wp_​list_​pages()`.  I don't care if this is fixed by changing
 `esc_attr()` or calling it as `strip_tags(esc_attr())` in
 `wp_​list_​pages()`, but escaped elements should not be present within
 this specific title attribute.

 I changed the title of this bug back to the original, as that is still the
 outstanding issue.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11040#comment:13>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software