[wp-trac] [WordPress Trac] #57093: Some html attributes are missing the esc_attr_e

WordPress Trac noreply at wordpress.org
Sun Nov 13 18:47:16 UTC 2022


#57093: Some html attributes are missing the esc_attr_e
--------------------------+-----------------------------
 Reporter:  kowsar89      |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 I found two strings inside HTML attributes where escaping is missing.
 These should be escaped too, since strings inside HTML attributes are
 escaped everywhere.

 ** wp-admin/nav-menus.php **

 {{{
 <input type="button" class="deletion menu-items-delete disabled"
 value="<?php _e( 'Remove Selected Items' ); ?>">
 }}}

 **wp-admin/widgets-form.php:**
 {{{
 <input type="submit" name="removewidget" id="removewidget" class="button-
 link button-link-delete widget-control-remove" value="<?php _e( 'Delete'
 ); ?>" />
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57093>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list