[wp-trac] [WordPress Trac] #58251: Escaping issue found while echoing attribute's dynamic value in html attribute.

[WordPress Trac]

#58251: Escaping issue found while echoing attribute's dynamic value in html
attribute.
---------------------------+-------------------------------
 Reporter:  madhusudandev  |       Owner:  (none)
     Type:  defect (bug)   |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Toolbar        |     Version:
 Severity:  normal         |  Resolution:
 Keywords:  has-patch      |     Focuses:  coding-standards
---------------------------+-------------------------------
Changes (by audrasjb):

 * version:  6.2 =>
 * component:  Administration => Toolbar


Comment:

 Hello, welcome to Trac and thanks for the ticket,

 Line 458 is pretty different than the two other ones.
 - L487: in `_render_container()`, the variable `$node` is passed as
 parameter of the function and comes from something than can be filtered by
 plugins or various snippets.
 - L514: same goes for the related `$node` variable.
 - L458: `$class` doesn't comes from the function and is purely static,
 non-filterable.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58251#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform