[wp-trac] [WordPress Trac] #24417: get_the_post_format_url() should not escape data

WordPress Trac noreply at wordpress.org
Sat May 25 06:06:10 UTC 2013


#24417: get_the_post_format_url() should not escape data
--------------------------+--------------------
 Reporter:  tollmanz      |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.6
Component:  Post Formats  |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+--------------------

Comment (by nacin):

 If we had to do functions like get_permalink() over again, we'd escape
 almost everywhere — and at the very least, we should esc_url_raw() where
 we can.

 In the case of get_permalink(), the URL is only generated by sanitized
 post data and a filter. In the case of this function, it acts directly on
 user-supplied input. There's a distinct difference.

 Wontfix?

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24417#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list