[wp-trac] [WordPress Trac] #25422: Don't escape plugin author field when deleting plugin

WordPress Trac noreply at wordpress.org
Thu Sep 26 17:19:10 UTC 2013


#25422: Don't escape plugin author field when deleting plugin
----------------------------+-----------------------------
 Reporter:  johnbillion     |      Owner:
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:
 Severity:  minor           |   Keywords:
----------------------------+-----------------------------
 When deleting a plugin, the plugin author field is escaped with
 `esc_html()`, but HTML is allowed in this field so it shouldn't be
 escaped.

 An example is when a plugin's Author field contains more than one author
 name, and each name is a hyperlink.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25422>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list