[wp-trac] Re: [WordPress Trac] #9727: missing escape in wp_update_post?

[WordPress Trac]

#9727: missing escape in wp_update_post?
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan                              
     Type:  defect (bug)       |      Status:  new                               
 Priority:  normal             |   Milestone:  2.8                               
Component:  Security           |     Version:  2.8                               
 Severity:  normal             |    Keywords:  2nd-opinion dev-feedback has-patch
-------------------------------+--------------------------------------------

Comment(by ryan):

 We generally assume slashed, yes, although in this case it looks like we
 have a loophole for things passed as an object.  Changing it might break
 existing expectations. Perhaps update phpdoc to note that objects are not
 expected slashed.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9727#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software