[wp-trac] [WordPress Trac] #13051: admin_url() and site_url() shouldn't need esc_url()
WordPress Trac
wp-trac at lists.automattic.com
Sat May 8 02:10:35 UTC 2010
#13051: admin_url() and site_url() shouldn't need esc_url()
--------------------------+-------------------------------------------------
Reporter: alexkingorg | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.1
Component: Security | Version: 3.0
Severity: normal | Keywords: needs-patch early
--------------------------+-------------------------------------------------
Comment(by alexkingorg):
There may be some places that don't call {{{wp_sanitize_redirect()}}} and
could still have issues, but it seems to me that adding the sanitization
call in those places is the right approach.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/13051#comment:24>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list