[wp-trac] [WordPress Trac] #56655: add_menu_page - escaping $page_title, $menu_title

[WordPress Trac]

#56655: add_menu_page - escaping $page_title, $menu_title
-----------------------------------------+------------------------------
 Reporter:  soupia18                     |       Owner:  (none)
     Type:  defect (bug)                 |      Status:  new
 Priority:  normal                       |   Milestone:  Awaiting Review
Component:  Menus                        |     Version:  trunk
 Severity:  critical                     |  Resolution:
 Keywords:  needs-patch has-screenshots  |     Focuses:  administration
-----------------------------------------+------------------------------

Comment (by soupia18):

 @martinkrcho

 Hi! I just noticed that the same issue exists also when we use
 add_meta_boxes().

 This example:
 {{{#!php
 <?php
 add_meta_box(
         'prefix_my_metabox',
         __('<script>alert('hola!');</script>Metabox Title', 'text-
 domain'),
         'prefix_my_callback',
         null,
         'normal',
         'default',
         array(),
 );
 }}}

 Would make sense to create a new ticket/report for this one?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56655#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform