[wp-trac] [WordPress Trac] #21767: Remove stripslashes from API functions

[WordPress Trac]

#21767: Remove stripslashes from API functions
-------------------------------------------------+-------------------------
 Reporter:  alexkingorg                          |       Owner:
     Type:  task (blessed)                       |      Status:  new
 Priority:  normal                               |   Milestone:  3.6
Component:  Formatting                           |     Version:  3.4
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch needs-testing needs-unit-  |
  tests 3.6-early                                |
-------------------------------------------------+-------------------------

Comment (by ryan):

 Not many calls to addslashes() remain. It is used in some inline js that
 perhaps should be using esc_js() instead. default-widgets.php still does
 some strip/add juggling with kses that can probably be replaced with a
 straight call to wp_kses_data as is now done in default-filters.php.
 query.php uses addslashes_gpc() in a few places.

 addslashes() and stripslashes() should be retained in a few places.
 Notably the upgrade routines in wp-admin/includes/upgrade.php and in the
 slashing utility functions in formatting.php, wp-db.php, and kses.php.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21767#comment:57>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software