[wp-trac] [WordPress Trac] #12309: Deprecate clean_url() in favor of esc_url() and esc_url_raw()
WordPress Trac
wp-trac at lists.automattic.com
Sat Feb 20 20:42:08 UTC 2010
#12309: Deprecate clean_url() in favor of esc_url() and esc_url_raw()
-------------------------+--------------------------------------------------
Reporter: nacin | Owner: nacin
Type: enhancement | Status: new
Priority: normal | Milestone: 3.0
Component: Inline Docs | Version:
Severity: normal | Keywords:
-------------------------+--------------------------------------------------
Though eliminating a straight alias doesn't make much of a difference, the
less validation and sanitization functions we have, the less confused
plugin authors are, which hopefully means they try to write more secure
the code.
We should merge clean_url() into esc_url(), giving esc_url() a $_context
argument. esc_url_raw() can then call esc_url() with a $_context of 'db'.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/12309>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list