[wp-trac] [WordPress Trac] #30036: Add some escaping to $handle when printing styles.

WordPress Trac noreply at wordpress.org
Sun Oct 19 00:24:04 UTC 2014


#30036: Add some escaping to $handle when printing styles.
-----------------------------+------------------------------
 Reporter:  georgestephanis  |       Owner:
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Script Loader    |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by azaozz):

 Thinking we should be more restrictive. Don't see a good reason to support
 anything except `[a-zA-Z0-9_-]+` for handles, both JS and CSS. To stay
 back-compat we can filter the handles on adding and using them, i.e.
 replace "unwanted" chars with dashes and throw "Doing it wrong".

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30036#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list