[wp-trac] [WordPress Trac] #32233: Improve escaping in /wp-admin/includes/template.php

WordPress Trac noreply at wordpress.org
Sat May 2 09:32:55 UTC 2015

#32233: Improve escaping in /wp-admin/includes/template.php
 Reporter:  McGuive7                 |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Administration           |     Version:  trunk
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:  administration

Comment (by SergeyBiryukov):

 `esc_html_e()` should only be used for translatable strings, not for PHP

 Translations should be considered safe, we generally only escape them in
 attributes or in `<option>` tags.

Ticket URL: <https://core.trac.wordpress.org/ticket/32233#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list