[wp-trac] [WordPress Trac] #30724: Twenty Fifteen: Unnecessary use of esc_html()

WordPress Trac noreply at wordpress.org
Tue Dec 16 18:58:59 UTC 2014


#30724: Twenty Fifteen: Unnecessary use of esc_html()
------------------------------------------+-----------------------
 Reporter:  ocean90                       |       Owner:  ocean90
     Type:  defect (bug)                  |      Status:  accepted
 Priority:  high                          |   Milestone:  4.1
Component:  Bundled Theme                 |     Version:
 Severity:  normal                        |  Resolution:
 Keywords:  has-patch commit fixed-major  |     Focuses:
------------------------------------------+-----------------------

Comment (by johnbillion):

 Replying to [comment:12 sboisvert]:
 > This doesn't even take under account that you may not be able to trust
 the end users doing the translations.
 Translations are inherently trusted. The `__()` family of functions are
 used thousands of times and they don't escape output. If we're not
 trusting translations then we have a big problem.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30724#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list