[wp-trac] [WordPress Trac] #24580: wp-admin/includes/media.php: edit_form_image_editor() missing esc_attr() on Caption textarea.

WordPress Trac noreply at wordpress.org
Fri Jun 14 23:36:45 UTC 2013


#24580: wp-admin/includes/media.php: edit_form_image_editor() missing esc_attr() on
Caption textarea.
----------------------------+------------------------------
 Reporter:  AlexanderOMara  |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  General         |     Version:  trunk
 Severity:  minor           |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------------------

Comment (by helen):

 I believe `$post->post_excerpt` is returned already escaped. It's not
 further escaped in the `post_excerpt_meta_box()` function, either.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24580#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list