[wp-trac] [WordPress Trac] #63423: Find some Wrong escaping function into the core files

WordPress Trac noreply at wordpress.org
Fri May 9 18:50:46 UTC 2025


#63423: Find some Wrong escaping function into the core files
------------------------------------+-------------------------------
 Reporter:  viralsampat             |       Owner:  (none)
     Type:  defect (bug)            |      Status:  new
 Priority:  normal                  |   Milestone:  Awaiting Review
Component:  Media                   |     Version:
 Severity:  normal                  |  Resolution:
 Keywords:  dev-feedback has-patch  |     Focuses:  coding-standards
------------------------------------+-------------------------------
Changes (by sabernhardt):

 * version:  trunk =>
 * component:  General => Media


Comment:

 The commit message for [54243] notes that it intentionally "includes a
 less-common use of `esc_attr` for a `textarea`." Maybe it is worth adding
 a comment within the code (cc: @joedolson).

 I did not find an explanation for choosing `esc_attr` on #41474, but a
 similar download link [https://github.com/WordPress/wordpress-
 develop/blob/2836be6e7ef5502449fea96d56add23c48354aec/src/wp-
 admin/includes/class-wp-media-list-table.php#L843-L849 in the media list
 table] uses `esc_url`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63423#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list