WordPress.org

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #15454, comment 11


Ignore:
Timestamp:
12/16/10 13:36:01 (3 years ago)
Author:
garyc40
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #15454, comment 11

    initial v1  
    11There's this weird thing with sanitize_bookmark_field() and sanitize_term_field(). 
    22 
    3 Originally, when $context = 'edit', they will run 'link_notes' and 'term_description' through format_to_edit($value). The 2nd parameter of format_to_edit() is left to default (which is fault), which means format_to_edit($value) will escape the $value. 
     3Originally, when $context = 'edit', they will run 'link_notes' and 'term_description' through format_to_edit($value). The 2nd parameter of format_to_edit() is left to default (which is false), which means format_to_edit($value) will escape the $value. 
    44 
    55However, 'link_notes' and 'term_description' are already escaped before being inserted into the database (when $context = 'db'), because they're processed by "pre_link_notes" and "pre_term_description" filters, to which wp_filter_kses() is attached.