[wp-trac] [WordPress Trac] #24328: blogname and blogdescription are not escaped
WordPress Trac
noreply at wordpress.org
Mon May 13 13:54:50 UTC 2013
#24328: blogname and blogdescription are not escaped
----------------------------+------------------------------
Reporter: aniketpant | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Administration | Version:
Severity: normal | Resolution:
Keywords: has-patch |
----------------------------+------------------------------
Comment (by johnbillion):
Input should be sanitised, output should be escaped. We should escape this
coming out, not going in.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/24328#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list