[wp-trac] [WordPress Trac] #56160: Deprecate wp_sanitize_redirect
WordPress Trac
noreply at wordpress.org
Sun Feb 4 12:26:45 UTC 2024
#56160: Deprecate wp_sanitize_redirect
-----------------------------------+------------------------------
Reporter: malthert | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Security | Version: 2.3
Severity: normal | Resolution:
Keywords: 2nd-opinion has-patch | Focuses:
-----------------------------------+------------------------------
Comment (by kkmuffme):
I want to take over this ticket and created a PR to alias the functions
like what happened to `esc_url_raw` with `sanitize_url` in WP 6.1. I
didn't mark it as deprecated though to keep the external (plugins,...)
minimal.
I didn't look at the internals - if these functions actually did the same.
In case they did not, the docs for sanitize_url and esc_url_raw should be
updated instead to clarify that they're NOT safe for redirects.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/56160#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list