[wp-trac] [WordPress Trac] #25422: Don't escape plugin author field when deleting plugin
WordPress Trac
noreply at wordpress.org
Thu Sep 26 17:19:10 UTC 2013
#25422: Don't escape plugin author field when deleting plugin
----------------------------+-----------------------------
Reporter: johnbillion | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Administration | Version:
Severity: minor | Keywords:
----------------------------+-----------------------------
When deleting a plugin, the plugin author field is escaped with
`esc_html()`, but HTML is allowed in this field so it shouldn't be
escaped.
An example is when a plugin's Author field contains more than one author
name, and each name is a hyperlink.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/25422>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list