[wp-trac] [WordPress Trac] #34352: Differences in encoding between wp_login_url and wp_logout_url

[WordPress Trac]

#34352: Differences in encoding between wp_login_url and wp_logout_url
------------------------------------+---------------------------
 Reporter:  akibjorklund            |       Owner:  DrewAPicture
     Type:  defect (bug)            |      Status:  closed
 Priority:  normal                  |   Milestone:  4.6
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:  fixed
 Keywords:  has-patch               |     Focuses:  docs
------------------------------------+---------------------------
Changes (by DrewAPicture):

 * status:  reviewing => closed
 * resolution:   => fixed


Comment:

 In [changeset:"37753"]:
 {{{
 #!CommitTicketReference repository="" revision="37753"
 Docs: Clarify documentation for `wp_logout_url()` and `wp_login_url()` and
 corresponding hooks to highlight whether HTML-encoded or un-encoded values
 should be expected.

 The return from `wp_logout_url()` is HTML-encoded due to its value passing
 through `wp_nonce_url()` and thus `esc_html()`. Adversely `wp_login_url()`
 passes through no such escaping and therefore should not be expected to
 return an HTML-encoded value.

 Props akibjorklund for the initial patch.
 Fixes #34352.
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34352#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform