[wp-trac] [WordPress Trac] #54279: Unescaped echo in wp-includes/general-template.php

WordPress Trac noreply at wordpress.org
Sat Oct 16 22:02:14 UTC 2021


#54279: Unescaped echo in wp-includes/general-template.php
------------------------------+-----------------------------
 Reporter:  sabbirshouvo      |      Owner:  (none)
     Type:  defect (bug)      |     Status:  new
 Priority:  normal            |  Milestone:  Awaiting Review
Component:  General           |    Version:  trunk
 Severity:  normal            |   Keywords:  has-patch
  Focuses:  coding-standards  |
------------------------------+-----------------------------
 In `wp-includes/general-template.php` -> `wp_login_form()` there are
 unescaped value for form name & id that should be properly escaped with
 `esc_attr()`

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54279>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list