[wp-trac] [WordPress Trac] #52894: The wp_sanitize_script_attributes function added in version 5.7 does not escape attributes in some cases.
WordPress Trac
noreply at wordpress.org
Thu Mar 25 00:25:51 UTC 2021
#52894: The wp_sanitize_script_attributes function added in version 5.7 does not
escape attributes in some cases.
------------------------------+----------------------------
Reporter: tmatsuur | Owner: peterwilsoncc
Type: defect (bug) | Status: closed
Priority: normal | Milestone: 5.7.1
Component: Script Loader | Version: 5.7
Severity: critical | Resolution: fixed
Keywords: has-patch commit | Focuses:
------------------------------+----------------------------
Changes (by peterwilsoncc):
* owner: (none) => peterwilsoncc
* status: new => closed
* resolution: => fixed
Comment:
In [changeset:"50575" 50575]:
{{{
#!CommitTicketReference repository="" revision="50575"
Script Loader: Escape HTML5 boolean attribute names.
Add escaping of boolean attribute names in
`wp_sanitize_script_attributes()` for themes supporting HTML5 script
elements.
Props tmatsuur, johnbillion, joyously.
Fixes #52894.
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/52894#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list