[wp-trac] [WordPress Trac] #29696: user_nicename is not being sanitized when updated by wp_update_user()

[WordPress Trac]

#29696: user_nicename is not being sanitized when updated by wp_update_user()
------------------------------+---------------------------
 Reporter:  joemcgill         |       Owner:  boonebgorges
     Type:  defect (bug)      |      Status:  accepted
 Priority:  normal            |   Milestone:  4.1
Component:  Users             |     Version:  trunk
 Severity:  normal            |  Resolution:
 Keywords:  has-patch commit  |     Focuses:
------------------------------+---------------------------
Changes (by nacin):

 * keywords:  has-patch => has-patch commit


Comment:

 Anyone relying on this was relying on very unexpected behavior. Sanitizing
 each time is also how it works for user_login.

 This ''could'' break something. There's the ''potential'' that someone did
 want characters in a URL that would be stripped out by sanitize_title(),
 such as a dot. But they'd have to be doing this through the API somehow.

 Wanted to document these issues, but I am fine with it.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29696#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform