Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #56140, comment 3


Ignore:
Timestamp:
07/05/2022 12:21:49 PM (2 years ago)
Author:
SergeyBiryukov
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #56140, comment 3

    initial v1  
    22> We only need to make sure that it is correctly escaped for the `value` attribute, don't we?
    33
    4 Yes, I think `esc_attr()` is correct here. It's not unlikely that some might want to put "Website: none", "in progress", or something else that's not a valid URL in their profile.
     4Yes, I think `esc_attr()` is correct here. It's not unlikely that someone might want to put "Website: none", "in progress", or something else that's not a valid URL in their profile.
    55
    66Requiring a valid URL and sanitizing it as such, with appropriate error messages, could be a separate enhancement.