[wp-trac] [WordPress Trac] #57143: Add escaping properly in Permalink options page
WordPress Trac
noreply at wordpress.org
Fri Nov 18 05:09:03 UTC 2022
#57143: Add escaping properly in Permalink options page
----------------------------+-----------------------------
Reporter: jaedm97 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Administration | Version: trunk
Severity: normal | Keywords:
Focuses: |
----------------------------+-----------------------------
In the `options-permalink.php`, I noticed there are some missing escaping.
I think these should be escaped properly. Example
{{{
<?php echo '%' . $tag . '%'; ?>
}}}
Here the variable `$tag` is not escaped while using.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/57143>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list