WordPress.org
Get WordPress

Make WordPress Core

Opened 8 years ago

Closed 8 years ago

Last modified 8 years ago

#45460 closed enhancement (wontfix)

Escaping suggestion

Reported by: utsav72640 Owned by:
Priority: normal Milestone:
Component: Users Version:
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

May be this escaping issue which is resolved by this patch.

Attachments (1)

escapingissue.patch​ (432 bytes ) - added by utsav72640 8 years ago.

Download all attachments as: .zip

Change History (4)

@utsav72640
8 years ago

This ticket was mentioned in ​Slack in #core by utsav72640. ​View the logs.
8 years ago

#2 @swissspidy
8 years ago

  • Component General → Users
  • Milestone Awaiting Review
  • Resolution → wontfix
  • Status new → closed

The error messages are just translated strings coming from wpmu_activate_signup(). I don't think there's any point in escaping them as we trust translations coming from WordPress.org. Also, this would prevent anyone filtering the messages through gettext to include some HTML if they wanted to.

Two notes on your patch for future reference:

  • Please create patches from the base directory of your VCS checkout, so that it includes the full path to the file src/wp-activate.php and not just wp-activate.php
  • Please adhere to the ​WordPress coding standards and add spaces between parentheses.

#3 @SergeyBiryukov
8 years ago

  • Summary Esacaping suggestion → Escaping suggestion
Note: See TracTickets for help on using tickets.