[wp-trac] [WordPress Trac] #24417: get_the_post_format_url() should not escape data
WordPress Trac
noreply at wordpress.org
Sat May 25 06:06:10 UTC 2013
#24417: get_the_post_format_url() should not escape data
--------------------------+--------------------
Reporter: tollmanz | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.6
Component: Post Formats | Version: trunk
Severity: normal | Resolution:
Keywords: has-patch |
--------------------------+--------------------
Comment (by nacin):
If we had to do functions like get_permalink() over again, we'd escape
almost everywhere — and at the very least, we should esc_url_raw() where
we can.
In the case of get_permalink(), the URL is only generated by sanitized
post data and a filter. In the case of this function, it acts directly on
user-supplied input. There's a distinct difference.
Wontfix?
--
Ticket URL: <http://core.trac.wordpress.org/ticket/24417#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list