Opened 7 years ago
Closed 6 years ago
#41827 closed defect (bug) (wontfix)
add sanitize_html_class in whole class while there is no spacing.
Reported by: | umangvaghela123 | Owned by: | |
---|---|---|---|
Milestone: | Priority: | normal | |
Severity: | normal | Version: | |
Component: | Administration | Keywords: | has-patch |
Focuses: | administration | Cc: |
Description
Attachments (1)
Change History (6)
#3
@
7 years ago
Hi @SergeyBiryukov
Thank you for Quick response.When We use the sanitize_html_class() function in HTML that time it is good for us to use sanitize whole class but it is required to check class that has no space.We add the like 'plugin-card-' that time our CSS is not working, but CSS is working when we apply "plugin-card-1" or "2" something in class.It is fine If we use this one.
One advantage: Reduce the chances of the conflict in CSS between class.
Note: See
TracTickets for help on using
tickets.
Hi @umangvaghela123, thanks for the patch!
Sanitizing functions are meant for user input or variables that come from various APIs, what's the benefit of sanitizing a hardcoded string?