[wp-trac] [WordPress Trac] #56140: Need to use esc_url escaping function instead of esc_attr.

WordPress Trac noreply at wordpress.org
Tue Jul 5 12:42:35 UTC 2022


#56140: Need to use esc_url escaping function instead of esc_attr.
-----------------------------------+----------------------
 Reporter:  vishitshah             |       Owner:  (none)
     Type:  defect (bug)           |      Status:  closed
 Priority:  normal                 |   Milestone:
Component:  Users                  |     Version:
 Severity:  normal                 |  Resolution:  wontfix
 Keywords:  has-patch 2nd-opinion  |     Focuses:
-----------------------------------+----------------------
Changes (by ocean90):

 * status:  new => closed
 * resolution:   => wontfix
 * milestone:  Awaiting Review =>


Comment:

 I agree that `esc_attr()` is the proper function here since the primary
 use case is to escape the value for an attribute, which isn't `href`,
 `src` or similar.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56140#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list