[wp-trac] [WordPress Trac] #54255: Use esc_html() to escaping variable in about page

WordPress Trac noreply at wordpress.org
Thu Oct 14 09:34:38 UTC 2021


#54255: Use esc_html() to escaping variable in about page
--------------------------+-------------------------------
 Reporter:  sayedulsayem  |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  5.9
Component:  Help/About    |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:  coding-standards
--------------------------+-------------------------------
Changes (by sayedulsayem):

 * keywords:  has-patch needs-refresh => has-patch


Comment:

 Thank you for pointing out this title mistake. I added another patch with
 the mentioned change.
 Replying to [comment:6 mukesh27]:
 > Hi there, Thanks for the ticket and patch!
 >
 > Please add brackets before and after `$display_version`?
 >
 > {{{
 > <?php echo esc_html( $display_version ); ?>
 > }}}
 >
 > Remove `commit` for now.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54255#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list