[wp-trac] [WordPress Trac] #24903: Data returned via wp_count_comments() should be handled properly on output

WordPress Trac noreply at wordpress.org
Wed Jul 31 18:17:21 UTC 2013


#24903: Data returned via wp_count_comments() should be handled properly on output
--------------------------+-----------------------------
 Reporter:  jeremyfelt    |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Comments      |    Version:
 Severity:  normal        |   Keywords:  has-patch
--------------------------+-----------------------------
 There are a few cases in core where data returned from
 `wp_count_comments()` is used immediately to output without escaping it
 properly. While core provides the correct data types, a filter can be used
 to modify the data completely before it has a chance to do so. It makes
 sense to cast these as `(int)` when necessary.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24903>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list