[wp-trac] [WordPress Trac] #24941: esc_sql in 3.6 changes how /r /n and maybe other characters handled

[WordPress Trac]

#24941: esc_sql in 3.6 changes how /r /n and maybe other characters handled
--------------------------+------------------------------
 Reporter:  sc0ttkclark   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Formatting    |     Version:  3.6
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------------------

Comment (by nofearinc):

 @sc0ttkclark, I understand your concern and I still have no idea how
 `esc_sql` would be useful in this scenario. The post insert/update process
 is reusing the $wpdb->insert() function which is calling a prepared
 statement, escaping eventual dangerous SQL code.

 The only possible issue I see is with injecting markup/JavaScript when not
 needed, but that is not related to the `esc_sql`.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24941#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software