[wp-trac] [WordPress Trac] #24328: blogname and blogdescription are not escaped

WordPress Trac noreply at wordpress.org
Mon May 13 13:54:50 UTC 2013


#24328: blogname and blogdescription are not escaped
----------------------------+------------------------------
 Reporter:  aniketpant      |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Administration  |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------------------

Comment (by johnbillion):

 Input should be sanitised, output should be escaped. We should escape this
 coming out, not going in.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24328#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list