[wp-trac] [WordPress Trac] #32142: Escape $s global

WordPress Trac noreply at wordpress.org
Mon Apr 27 07:20:58 UTC 2015


#32142: Escape $s global
--------------------------+-----------------------
 Reporter:  nacin         |       Owner:  nacin
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  4.3
Component:  Query         |     Version:
 Severity:  normal        |  Resolution:  fixed
 Keywords:                |     Focuses:  template
--------------------------+-----------------------

Comment (by rmccue):

 Seems to me like this punishes themes doing it correctly? If I was
 previously doing `title="echo esc_attr( $s )"` (correctly doing late
 escaping), the text would now be double-escaped.

 Also, pretty sure it breaks if you pass it back into `WP_Query`, which I
 can see done in one of the themes I have locally.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32142#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list