[wp-trac] [WordPress Trac] #56696: Twenty Eleven: Correctly escape stylesheet URL (was: This has been discussed with a security team member who verified it's suitable as a public hardening issue.)

[WordPress Trac]

#56696: Twenty Eleven: Correctly escape stylesheet URL
----------------------------+------------------------------
 Reporter:  Alberuni Azad.  |       Owner:  (none)
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Bundled Theme   |     Version:  3.2
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |     Focuses:
----------------------------+------------------------------
Description changed by audrasjb:

Old description:

> IN 'wp-content/themes/twentyeleven/header.php' on line '52' I've found
> that "bloginfo( 'stylesheet_url' )" was used without escaping. I know
> it's a silly issue. But I think we can improve it by escaping the URL for
> more consistency.

New description:

 IN 'wp-content/themes/twentyeleven/header.php' on line '52' I've found
 that "bloginfo( 'stylesheet_url' )" was used without escaping. I know it's
 a silly issue. But I think we can improve it by escaping the URL for more
 consistency.

 This has been discussed with a security team member who verified it's
 suitable as a public hardening issue.

--

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56696#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform