[wp-trac] [WordPress Trac] #21523: Add additional escaping to credit.php

WordPress Trac noreply at wordpress.org
Tue May 26 10:12:12 UTC 2015


#21523: Add additional escaping to credit.php
------------------------------------------+-----------------------------
 Reporter:  Viper007Bond                  |       Owner:
     Type:  enhancement                   |      Status:  new
 Priority:  normal                        |   Milestone:  Future Release
Component:  Help/About                    |     Version:  3.4
 Severity:  normal                        |  Resolution:
 Keywords:  needs-refresh good-first-bug  |     Focuses:
------------------------------------------+-----------------------------

Comment (by protechig):

 Replying to [comment:5 chriscct7]:
 > While malicious use of other parts of WordPress.org could do more
 damage, they are significantly harder to use without explicit knowledge of
 how the .org architecture works. In light of the jQuery.com hack, this is
 pretty low hanging to do. Patch needs refresh. Good first bug though.

 I would love to try to tackle this bug. It would be my first patch, I do
 want to get started contributing to WP. Would you be kind enough to point
 me in the right direction (an article) on the proper way to satanize this
 data, or even an example in another WP file that I can reference?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/21523#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list