WordPress.org
Get WordPress

Make WordPress Core

Opened 12 years ago

Closed 12 years ago

#27274 closed defect (bug) (fixed)

_e() used incorrectly for attribute values

Reported by: DJPaul Owned by: SergeyBiryukov
Priority: normal Milestone: 3.9
Component: I18N Version: 3.9
Severity: normal Keywords: has-patch commit
Cc: Focuses:

Description

There are a couple of places where _e is being used to set the value of a HTML attribute, where esc_attr_e should be used to correctly escape the output.

Attachments (1)

27274.01.patch​ (1.5 KB ) - added by DJPaul 12 years ago.

Download all attachments as: .zip

Change History (5)

@DJPaul
12 years ago

#1 @DJPaul
12 years ago

  • Keywords has-patch added

#2 @SergeyBiryukov
12 years ago

  • Keywords commit added
  • Milestone Awaiting Review → 3.9

#4 @SergeyBiryukov
12 years ago

  • Owner set to SergeyBiryukov
  • Resolution → fixed
  • Status new → closed

In 27400:

Use esc_attr_e() instead of _e() for attribute values.

props DJPaul.
fixes #27274.

Note: See TracTickets for help on using tickets.