[wp-trac] [WordPress Trac] #21974: esc_url() doesn't allow protocol-relative URLs with colons

[WordPress Trac]

#21974: esc_url() doesn't allow protocol-relative URLs with colons
------------------------------+------------------
 Reporter:  SergeyBiryukov    |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  3.6
Component:  Formatting        |     Version:
 Severity:  normal            |  Resolution:
 Keywords:  has-patch commit  |
------------------------------+------------------

Comment (by nacin):

 Per duck_, this is good. A few other security libraries don't do
 *anything* when the first character is /, #, or ? — which reminded us both
 of #22951, the esc_url() performance ticket.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/21974#comment:12>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software