[wp-trac] [WordPress Trac] #56128: Wrong escaping in 'class-wp-nav-menu-widget.php' file

WordPress Trac noreply at wordpress.org
Fri Jul 1 19:59:53 UTC 2022

#56128: Wrong escaping in 'class-wp-nav-menu-widget.php' file
 Reporter:  hztyfoon      |       Owner:  SergeyBiryukov
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  6.1
Component:  Widgets       |     Version:  4.3
 Severity:  normal        |  Resolution:  fixed
 Keywords:  has-patch     |     Focuses:  administration, coding-standards
Changes (by SergeyBiryukov):

 * status:  assigned => closed
 * resolution:   => fixed


 In [changeset:"53630" 53630]:
 #!CommitTicketReference repository="" revision="53630"
 Widgets: Add a comment in `WP_Nav_Menu_Widget::form()` to clarify the
 `esc_attr()` usage.

 The URL to create a new menu from the the Navigation Menu widget can be a
 `javascript:` link to the Customizer Menus panel, so `esc_attr()` is used
 here instead of `esc_url()`.

 Follow-up to [53092].

 Props hztyfoon.
 Fixes #56128.

Ticket URL: <https://core.trac.wordpress.org/ticket/56128#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list