[wp-trac] [WordPress Trac] #58252: Escaping issue found while echoing attribute's dynamic value in html attribute.

[WordPress Trac]

#58252: Escaping issue found while echoing attribute's dynamic value in html
attribute.
------------------------------+-----------------------------
 Reporter:  madhusudandev     |      Owner:  (none)
     Type:  defect (bug)      |     Status:  new
 Priority:  normal            |  Milestone:  Awaiting Review
Component:  Administration    |    Version:  6.2
 Severity:  normal            |   Keywords:
  Focuses:  coding-standards  |
------------------------------+-----------------------------
 In [https://github.com/WordPress/wordpress-develop/blob/trunk/src/wp-
 includes/class-wp-admin-bar.php#L458 wp-includes/class-wp-admin-bar.php]
 file, I've found that the there is an escaping issue while echoing
 attribute's dynamic value in html attribute (like class). The issue is
 found at line 458 of that file. I think it should be escaped.

 I've seen the attribute's dynamic value were escaped in the other lines of
 that file. Link mentioned below:

 https://github.com/WordPress/wordpress-develop/blob/trunk/src/wp-includes
 /class-wp-admin-bar.php#L487
 https://github.com/WordPress/wordpress-develop/blob/trunk/src/wp-includes
 /class-wp-admin-bar.php#L514

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58252>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform