[wp-trac] [WordPress Trac] #32233: Improve escaping in /wp-admin/includes/template.php

[WordPress Trac]

#32233: Improve escaping in /wp-admin/includes/template.php
-------------------------------------+------------------------------
 Reporter:  McGuive7                 |       Owner:
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Administration           |     Version:  trunk
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:  administration
-------------------------------------+------------------------------

Comment (by SergeyBiryukov):

 `esc_html_e()` should only be used for translatable strings, not for PHP
 variables.

 Translations should be considered safe, we generally only escape them in
 attributes or in `<option>` tags.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32233#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform