[wp-trac] [WordPress Trac] #18875: CSS classes for WP List Table are not properly sanitized

WordPress Trac wp-trac at lists.automattic.com
Thu Oct 6 17:13:03 UTC 2011


#18875: CSS classes for WP List Table are not properly sanitized
----------------------------+------------------------------
 Reporter:  sbressler       |       Owner:  scottbre
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Administration  |     Version:  3.1
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------------------

Comment (by sbressler):

 Attached is a patch that fixes this issue. I decided to address the issue
 in the constructor rather than before the classes were output so that we
 can address any other uses of $args that might be added later to the file.

 While $args['singular'] might be empty, there is no harm to running it
 through sanitize_title as well. However, that line could easily be wrapped
 in `if ( $args['singular'] )` if performance is a concern.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/18875#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list