[wp-trac] [WordPress Trac] #65397: Use esc_url() instead of esc_attr() for download link href in attachment_submitbox_metadata()
WordPress Trac
noreply at wordpress.org
Fri Jun 5 06:55:58 UTC 2026
#65397: Use esc_url() instead of esc_attr() for download link href in
attachment_submitbox_metadata()
-------------------------------------------------+-------------------------
Reporter: thisismyurl | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 7.1
Component: Media | Version: 6.2
Severity: normal | Resolution:
Keywords: has-patch needs-testing has- | Focuses:
screenshots | administration
-------------------------------------------------+-------------------------
Comment (by manhar):
Tested on WordPress 7.1-alpha-62161-src. Navigated to Media → Library,
opened an attachment, and confirmed the "Download file" link in the
sidebar works correctly with esc_url().
The href renders as a valid, normalized URL and the file downloads as
expected. No regressions observed.
Patch looks good.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/65397#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list