[wp-trac] [WordPress Trac] #61341: Lack of escaping in Moment.js localization

WordPress Trac noreply at wordpress.org
Sat Jun 1 09:57:38 UTC 2024


#61341: Lack of escaping in Moment.js localization
---------------------------+-----------------------
 Reporter:  swissspidy     |      Owner:  (none)
     Type:  defect (bug)   |     Status:  assigned
 Priority:  low            |  Milestone:  6.6
Component:  Script Loader  |    Version:
 Severity:  minor          |   Keywords:  has-patch
  Focuses:                 |
---------------------------+-----------------------
 If for some reason `get_user_locale()` doesn't return a simply string, it
 can break the inline script added for Moment.js localization here:
 https://github.com/WordPress/wordpress-
 develop/blob/2c818502ea70b27c36f420112152b26bd0ebe8fe/src/wp-includes
 /script-loader.php#L146-L147

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61341>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list