[wp-trac] [WordPress Trac] #62545: Adminbar title not escaped
WordPress Trac
noreply at wordpress.org
Mon Nov 25 06:01:49 UTC 2024
#62545: Adminbar title not escaped
-------------------------------+------------------------------
Reporter: kkmuffme | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Toolbar | Version:
Severity: minor | Resolution:
Keywords: close 2nd-opinion | Focuses:
-------------------------------+------------------------------
Comment (by yogeshbhutkar):
@sabernhardt, If escaping is required in this context, we can utilize
`wp_kses_post()`. This function allows safe HTML to pass through while
preventing potentially harmful elements, avoiding the side effects
illustrated in the screenshot.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62545#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list