| 1 | | Currently [https://github.com/WordPress/wordpress-develop/blob/b846378649ac2d3a1c8dc81a8901ca4a4d926006/src/wp-includes/functions.php#L7637-L7674 the function] responsible sanitizing script attributes does not escape attribute names, but only attribute values. |
| 2 | | Do you think it would be necessary to escape also attribute names? |
| | 1 | Currently [https://github.com/WordPress/wordpress-develop/blob/b846378649ac2d3a1c8dc81a8901ca4a4d926006/src/wp-includes/functions.php#L7637-L7674 the function] responsible sanitizing script attributes does not sanitize attribute names, but it escapes attribute values. |
| | 2 | Do you think it would be necessary to sanitize attribute names? |