[wp-trac] [WordPress Trac] #22249: Add ability to set or remove attributes on enqueued scripts and styles.

[WordPress Trac]

#22249: Add ability to set or remove attributes on enqueued scripts and styles.
---------------------------------------------+-----------------------------
 Reporter:  ryanve                           |       Owner:
     Type:  enhancement                      |      Status:  assigned
 Priority:  normal                           |   Milestone:  Future Release
Component:  Script Loader                    |     Version:
 Severity:  normal                           |  Resolution:
 Keywords:  needs-refresh early needs-patch  |     Focuses:
---------------------------------------------+-----------------------------

Comment (by joe_bopper):

 Hi,

 Notably, this patch uses `esc_attr` on line 501 to escape the attribute
 names. This isn't correct as it only clears out invalid utf8 characters
 and quotes, whereas valid attribute names need to be cleared of all the
 following characters `[\t\n\f \/>"\'=]+`.

 Cheers.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/22249#comment:43>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform