[wp-trac] [WordPress Trac] #56159: unescaped 'href' of an 'a tag' in 'wp-content/themes/twentyfourteen/inc/widgets.php' in line number 192

[WordPress Trac]

#56159: unescaped 'href' of an 'a tag' in 'wp-
content/themes/twentyfourteen/inc/widgets.php' in line number 192
---------------------------+-------------------------------
 Reporter:  paulamit       |       Owner:  (none)
     Type:  defect (bug)   |      Status:  closed
 Priority:  normal         |   Milestone:
Component:  Bundled Theme  |     Version:
 Severity:  normal         |  Resolution:  invalid
 Keywords:  has-patch      |     Focuses:  coding-standards
---------------------------+-------------------------------
Changes (by ocean90):

 * status:  new => closed
 * focuses:  administration, coding-standards => coding-standards
 * component:  Themes => Bundled Theme
 * version:  trunk =>
 * milestone:  Awaiting Review =>
 * resolution:   => invalid


Comment:

 Hello @paulamit, welcome to WordPress Trac!

 `the_permalink()` doesn't return the permalink but rather prints it
 directly and already uses `esc_url()` before doing that. You can review
 the [https://developer.wordpress.org/reference/functions/the_permalink/
 source of the function in the code reference].

 @paulamit @mahbubshovan @hztyfoon It's seems like you're working together.
 Please make sure you're also testing you patches and try to use the code
 reference to check how a function actually works. Thank you!

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56159#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform