[wp-trac] [WordPress Trac] #62545: Adminbar title not escaped
WordPress Trac
noreply at wordpress.org
Sat Nov 23 17:47:50 UTC 2024
#62545: Adminbar title not escaped
-------------------------------+------------------------------
Reporter: kkmuffme | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Toolbar | Version:
Severity: minor | Resolution:
Keywords: close 2nd-opinion | Focuses:
-------------------------------+------------------------------
Changes (by sabernhardt):
* keywords: has-patch => close 2nd-opinion
* component: Security => Toolbar
Comment:
It should not use `esc_html()` because that would break almost all links
with an icon or image, including links—and the search form—from Core.
I'll leave the ticket open in case there is a better way to sanitize the
node titles (or to skip creating a node if it finds something that does
not belong).
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62545#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list