[wp-trac] [WordPress Trac] #57094: Some html attributes are missing the esc_attr_e
WordPress Trac
noreply at wordpress.org
Sun Nov 13 18:47:38 UTC 2022
#57094: Some html attributes are missing the esc_attr_e
--------------------------+-----------------------------
Reporter: kowsar89 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
I found two strings inside HTML attributes where escaping is missing.
These should be escaped too, since strings inside HTML attributes are
escaped everywhere.
** wp-admin/nav-menus.php **
{{{
<input type="button" class="deletion menu-items-delete disabled"
value="<?php _e( 'Remove Selected Items' ); ?>">
}}}
**wp-admin/widgets-form.php:**
{{{
<input type="submit" name="removewidget" id="removewidget" class="button-
link button-link-delete widget-control-remove" value="<?php _e( 'Delete'
); ?>" />
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/57094>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list