WordPress.org

Make WordPress Core

Opened 5 months ago

Closed 5 months ago

#47385 closed enhancement (wontfix)

Theme escaping

Reported by: Kushal.Shah210 Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Bundled Theme Keywords: has-patch
Focuses: Cc:
PR Number:

Description

On twentyninteen theme comment with escaping html.

Attachments (1)

#47385.patch (1.5 KB) - added by Kushal.Shah210 5 months ago.

Download all attachments as: .zip

Change History (2)

#1 @SergeyBiryukov
5 months ago

  • Component changed from General to Bundled Theme
  • Milestone Awaiting Review deleted
  • Resolution set to wontfix
  • Status changed from new to closed

Hi @kushalshah210, welcome to WordPress Trac! Thanks for the ticket and the patch.

Core translations (including bundled themes) are considered safe because we have a review process for them, see #42639 and the discussion in #30724. (Also related: #32233.) So these strings don't need escaping.

In WordPress core and bundled themes, strings are generally only escaped in attributes or in <option> tags.

Note: See TracTickets for help on using tickets.