[wp-trac] [WordPress Trac] #58900: Escaping: Output String did not run through a proper escaping function

WordPress Trac noreply at wordpress.org
Fri Dec 8 21:03:05 UTC 2023


#58900: Escaping: Output String did not run through a proper escaping function
-----------------------------+-------------------------------
 Reporter:  armondal         |       Owner:  (none)
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:  3.4
 Severity:  normal           |  Resolution:
 Keywords:  has-patch close  |     Focuses:  coding-standards
-----------------------------+-------------------------------
Changes (by SergeyBiryukov):

 * keywords:  has-patch => has-patch close


Comment:

 Hi there, welcome back to WordPress Trac! Thanks for the ticket.

 Core translations are considered safe because we have a review process for
 them, see #42639 and the discussion in #30724. (Also related: #32233,
 #44637.)

 In WordPress core and older bundled themes, strings are generally only
 escaped in attributes or in `<option>` tags.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58900#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list