[wp-trac] [WordPress Trac] #49190: Consider escaping get_the_title() in default themes

WordPress Trac noreply at wordpress.org
Tue Jan 14 00:58:06 UTC 2020


#49190: Consider escaping get_the_title() in default themes
---------------------------+------------------------------
 Reporter:  kjellr         |       Owner:  (none)
     Type:  defect (bug)   |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Bundled Theme  |     Version:
 Severity:  normal         |  Resolution:
 Keywords:                 |     Focuses:
---------------------------+------------------------------
Changes (by joyously):

 * Attachment "comment-on-post-with-markup-in-title.jpg" added.

 Using esc_html() makes the markup show.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49190>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list