[wp-trac] [WordPress Trac] #32812: Customizer Menus: Escaping inconsistencies

[WordPress Trac]

#32812: Customizer Menus: Escaping inconsistencies
--------------------------+------------------------------
 Reporter:  swissspidy    |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Customize     |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:
--------------------------+------------------------------

Comment (by westonruter):

 Unfortunately the menus admin page “sanitizes” a menu's name via `trim(
 esc_html( $name ) )`, when `sanitize_text_field()` seems to be what should
 be used instead. Should we continue to emulate the existing behavior of
 the menus admin page, or should we improve/fix the sanitization logic for
 the admin page?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32812#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform