[wp-trac] [WordPress Trac] #35064: Remove title attributes: options-general.php

WordPress Trac noreply at wordpress.org
Tue Jan 12 01:59:37 UTC 2016


#35064: Remove title attributes: options-general.php
---------------------------------------+--------------------------------
 Reporter:  afercia                    |       Owner:  afercia
     Type:  defect (bug)               |      Status:  reopened
 Priority:  normal                     |   Milestone:  4.5
Component:  Administration             |     Version:  4.4
 Severity:  normal                     |  Resolution:
 Keywords:  has-patch has-screenshots  |     Focuses:  ui, accessibility
---------------------------------------+--------------------------------
Changes (by adamsilverstein):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 @afercia

 I think you may want to add some escaping around output of `$format`?

 This value is filtered and can't be trusted.

 See [attachment:35064.5.patch]

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35064#comment:22>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list