[wp-trac] [WordPress Trac] #65397: Use esc_url() instead of esc_attr() for download link href in attachment_submitbox_metadata() (was: Media: Use esc_url() instead of esc_attr() for download link href in attachment_fields_to_edit)

WordPress Trac noreply at wordpress.org
Wed Jun 3 05:33:12 UTC 2026


#65397: Use esc_url() instead of esc_attr() for download link href in
attachment_submitbox_metadata()
-------------------------------------+-----------------------------
 Reporter:  thisismyurl              |       Owner:  (none)
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  7.1
Component:  Media                    |     Version:  6.2
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:  administration
-------------------------------------+-----------------------------
Changes (by sabernhardt):

 * focuses:   => administration
 * version:  trunk => 6.2
 * milestone:  Awaiting Review => 7.1


Comment:

 #41474 / [55156] added the Download link in the attachment meta box, and
 #57574 used `esc_url()` for the similar link in row actions.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/65397#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list