[wp-trac] [WordPress Trac] #54279: Unescaped echo in wp-includes/general-template.php
WordPress Trac
noreply at wordpress.org
Sat Oct 16 22:02:14 UTC 2021
#54279: Unescaped echo in wp-includes/general-template.php
------------------------------+-----------------------------
Reporter: sabbirshouvo | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version: trunk
Severity: normal | Keywords: has-patch
Focuses: coding-standards |
------------------------------+-----------------------------
In `wp-includes/general-template.php` -> `wp_login_form()` there are
unescaped value for form name & id that should be properly escaped with
`esc_attr()`
--
Ticket URL: <https://core.trac.wordpress.org/ticket/54279>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list