[wp-trac] [WordPress Trac] #53876: "Un" Deprecate sanitize_url()

WordPress Trac noreply at wordpress.org
Tue Aug 10 19:43:48 UTC 2021


#53876: "Un" Deprecate sanitize_url()
--------------------------------------+-------------------------------
 Reporter:  Ipstenu                   |       Owner:  SergeyBiryukov
     Type:  enhancement               |      Status:  closed
 Priority:  normal                    |   Milestone:  5.9
Component:  General                   |     Version:
 Severity:  normal                    |  Resolution:  fixed
 Keywords:  good-first-bug has-patch  |     Focuses:  coding-standards
--------------------------------------+-------------------------------
Changes (by SergeyBiryukov):

 * owner:  (none) => SergeyBiryukov
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"51597" 51597]:
 {{{
 #!CommitTicketReference repository="" revision="51597"
 General: Restore (un-deprecate) the `sanitize_url()` function.

 A general security rule is "Sanitize when you save, escape when you echo",
 and for the most part WordPress has well-named functions like
 `sanitize_email()` and others, with `esc_url_raw()` being a single
 exception that does not follow the naming.

 This commit restores the previously deprecated `sanitize_url()` function
 as a valid alias of `esc_url_raw()`.

 This better aligns with the naming with other `sanitize_*()` functions:

 * `sanitize_bookmark()`
 * `sanitize_bookmark_field()`
 * `sanitize_category()`
 * `sanitize_category_field()`
 * `sanitize_comment_cookies()`
 * `sanitize_email()`
 * `sanitize_file_name()`
 * `sanitize_hex_color()`
 * `sanitize_hex_color_no_hash()`
 * `sanitize_html_class()`
 * `sanitize_key()`
 * `sanitize_meta()`
 * `sanitize_mime_type()`
 * `sanitize_option()`
 * `sanitize_post()`
 * `sanitize_post_field()`
 * `sanitize_sql_orderby()`
 * `sanitize_term()`
 * `sanitize_term_field()`
 * `sanitize_text_field()`
 * `sanitize_textarea_field()`
 * `sanitize_title()`
 * `sanitize_title_for_query()`
 * `sanitize_title_with_dashes()`
 * `sanitize_trackback_urls()`
 * `sanitize_user()`
 * `sanitize_user_field()`

 Follow-up to [11383], [13096].

 Props Ipstenu, aadilali.
 Fixes #53876.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53876#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list