[wp-trac] [WordPress Trac] #40401: Value of data-colname in wp-list-table is not escaped

[WordPress Trac]

#40401: Value of data-colname in wp-list-table is not escaped
------------------------------+-----------------------------
 Reporter:  rellect           |       Owner:  SergeyBiryukov
     Type:  defect (bug)      |      Status:  closed
 Priority:  normal            |   Milestone:  5.8
Component:  Administration    |     Version:  4.3
 Severity:  normal            |  Resolution:  fixed
 Keywords:  has-patch commit  |     Focuses:
------------------------------+-----------------------------
Changes (by whyisjake):

 * status:  reviewing => closed
 * resolution:   => fixed


Comment:

 In [changeset:"51115" 51115]:
 {{{
 #!CommitTicketReference repository="" revision="51115"
 Administration: Escape the values of data-colname.

 Adds a `esc_attr` wrapper to `strip_all_tags`.

 See [33016].

 Fixes #40401.

 Props rellect, SergeyBiryukov, hareesh-pillai, audrasjb.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/40401#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform