[wp-trac] [WordPress Trac] #56101: Need to use esc_html escaping function instead of esc_attr.

WordPress Trac noreply at wordpress.org
Mon Jul 4 08:14:56 UTC 2022


#56101: Need to use esc_html escaping function instead of esc_attr.
------------------------------+-----------------------
 Reporter:  chintan1896       |       Owner:  audrasjb
     Type:  defect (bug)      |      Status:  closed
 Priority:  normal            |   Milestone:  6.1
Component:  Comments          |     Version:  2.7
 Severity:  normal            |  Resolution:  fixed
 Keywords:  has-patch commit  |     Focuses:
------------------------------+-----------------------
Changes (by audrasjb):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 In [changeset:"53640" 53640]:
 {{{
 #!CommitTicketReference repository="" revision="53640"
 Comments: Use more appropriate escaping functions in class
 `WP_Comments_List_Table`.

 This changeset replaces `esc_attr` escaping function with `esc_html` as it
 is more appropriate in this context.

 Props chintan1896, afragen, peterwilsoncc, SergeyBiryukov.
 Fixes #56101.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56101#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list