[wp-trac] [WordPress Trac] #13051: admin_url() and site_url() shouldn't need esc_url()

WordPress Trac wp-trac at lists.automattic.com
Sat May 8 02:10:35 UTC 2010


#13051: admin_url() and site_url() shouldn't need esc_url()
--------------------------+-------------------------------------------------
 Reporter:  alexkingorg   |       Owner:  ryan             
     Type:  defect (bug)  |      Status:  new              
 Priority:  normal        |   Milestone:  3.1              
Component:  Security      |     Version:  3.0              
 Severity:  normal        |    Keywords:  needs-patch early
--------------------------+-------------------------------------------------

Comment(by alexkingorg):

 There may be some places that don't call {{{wp_sanitize_redirect()}}} and
 could still have issues, but it seems to me that adding the sanitization
 call in those places is the right approach.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/13051#comment:24>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list