![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 16 years ago
Closed 16 years ago
#12309 closed enhancement (fixed)
Deprecate clean_url() in favor of esc_url() and esc_url_raw()
| Reported by: | nacin | Owned by: | nacin |
|---|---|---|---|
| Priority: | normal | Milestone: | 3.0 |
| Component: | Inline Docs | Version: | |
| Severity: | normal | Keywords: | |
| Cc: | Focuses: |
Description
Though eliminating a straight alias doesn't make much of a difference, the less validation and sanitization functions we have, the less confused plugin authors are, which hopefully means they try to write more secure the code.
We should merge clean_url() into esc_url(), giving esc_url() a $_context argument. esc_url_raw() can then call esc_url() with a $_context of 'db'.
Attachments (1)
Change History (3)
Note:
See TracTickets
for help on using tickets.
(In [13297]) Use esc_url() instead of clean_url(). See #12309