[wp-trac] [WordPress Trac] #44274: htmlspecialchars call in template.php needs to be update

WordPress Trac noreply at wordpress.org
Wed May 30 09:40:26 UTC 2018


#44274: htmlspecialchars call in template.php needs to be update
----------------------------------------+-----------------------------
 Reporter:  khaihong                    |       Owner:  (none)
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  Future Release
Component:  General                     |     Version:
 Severity:  normal                      |  Resolution:
 Keywords:  needs-patch good-first-bug  |     Focuses:
----------------------------------------+-----------------------------
Changes (by johnbillion):

 * keywords:   => needs-patch good-first-bug
 * milestone:  Awaiting Review => Future Release


Comment:

 Thanks for the report, @khaihong! Welcome to WordPress Trac.

 It looks like this warning is coming from the `do_meta_boxes()` function.
 The `$context` parameter should be escaped with `esc_attr()` instead of
 `htmlspecialchars()`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44274#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list