[wp-trac] [WordPress Trac] #57143: Add escaping properly in Permalink options page

WordPress Trac noreply at wordpress.org
Fri Nov 18 05:09:03 UTC 2022


#57143: Add escaping properly in Permalink options page
----------------------------+-----------------------------
 Reporter:  jaedm97         |      Owner:  (none)
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:  trunk
 Severity:  normal          |   Keywords:
  Focuses:                  |
----------------------------+-----------------------------
 In the `options-permalink.php`, I noticed there are some missing escaping.
 I think these should be escaped properly. Example


 {{{
 <?php echo '%' . $tag . '%'; ?>
 }}}

 Here the variable `$tag` is not escaped while using.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57143>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list