[wp-trac] [WordPress Trac] #30036: Add some escaping to $handle when printing styles.
WordPress Trac
noreply at wordpress.org
Sun Oct 19 00:24:04 UTC 2014
#30036: Add some escaping to $handle when printing styles.
-----------------------------+------------------------------
Reporter: georgestephanis | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Script Loader | Version:
Severity: normal | Resolution:
Keywords: | Focuses:
-----------------------------+------------------------------
Comment (by azaozz):
Thinking we should be more restrictive. Don't see a good reason to support
anything except `[a-zA-Z0-9_-]+` for handles, both JS and CSS. To stay
back-compat we can filter the handles on adding and using them, i.e.
replace "unwanted" chars with dashes and throw "Doing it wrong".
--
Ticket URL: <https://core.trac.wordpress.org/ticket/30036#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list