[wp-trac] [WordPress Trac] #12309: Deprecate clean_url() in favor of esc_url() and esc_url_raw()

WordPress Trac wp-trac at lists.automattic.com
Sat Feb 20 20:42:08 UTC 2010


#12309: Deprecate clean_url() in favor of esc_url() and esc_url_raw()
-------------------------+--------------------------------------------------
 Reporter:  nacin        |       Owner:  nacin
     Type:  enhancement  |      Status:  new  
 Priority:  normal       |   Milestone:  3.0  
Component:  Inline Docs  |     Version:       
 Severity:  normal       |    Keywords:       
-------------------------+--------------------------------------------------
 Though eliminating a straight alias doesn't make much of a difference, the
 less validation and sanitization functions we have, the less confused
 plugin authors are, which hopefully means they try to write more secure
 the code.

 We should merge clean_url() into esc_url(), giving esc_url() a $_context
 argument. esc_url_raw() can then call esc_url() with a $_context of 'db'.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12309>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list