WordPress.org
Get WordPress

Make WordPress Core

Opened 2 years ago

Closed 2 years ago

#56116 closed defect (bug) (invalid)

Need escaping in wp-rest-posts-controller file

Reported by: priyankkpatel's profile priyankkpatel Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: REST API Keywords:
Focuses: Cc:

Description

in /wp-includes/rest-api/endpoints/class/class-wp-rest-posts-controller.php file, need escaping on a couple of places.
Attaching patch for the same.

Attachments (1)

56116.patch​ (1.4 KB) - added by priyankkpatel 2 years ago.

Download all attachments as: .zip

Change History (2)

@priyankkpatel
2 years ago

#1 @TimothyBlynJacobs
2 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

Hi @priyankkpatel,

Thanks for the ticket!

However, WordPress Core does not escape it's translations. See https://core.trac.wordpress.org/ticket/30724#comment:10.

Further, escaping in this location would be incorrect since escaping should be done late.

Note: See TracTickets for help on using tickets.