WordPress.org
Get WordPress

Make WordPress Core

Opened 2 years ago

Closed 2 years ago

#56148 closed defect (bug) (fixed)

unescaped 'home_url()' in 'wp-includes/post-template.php' file in line 1446

Reported by: sabbirmc's profile sabbirmc Owned by:
Milestone: 6.1 Priority: normal
Severity: normal Version:
Component: General Keywords: has-patch commit
Focuses: administration, coding-standards Cc:

Description

hey everyone 🙂
It's my first ticket at WordPress core. Super excited to contribute.

I've found an issue. That is in 'wp-includes/post-template.php' file, in line number 1446 there's 'home_url()' used without escaping. I think it should be escaped.

Attachments (1)

56148.patch​ (800 bytes) - added by tushar284 2 years ago.
Hi @sabbirmc, thanks for pointing this out. I've attached this solution. It should get the job done. Thanks!

Download all attachments as: .zip

Change History (7)

#1 @hztyfoon
2 years ago

Hey @sabbirmc, thanks for your contribution to WordPress core. Good one. 👍
Hope you'll continue your contribution to make WordPress better.

@tushar284
2 years ago

Hi @sabbirmc, thanks for pointing this out. I've attached this solution. It should get the job done. Thanks!

#2 @hztyfoon
2 years ago

  • Keywords has-patch added

#3 @costdev
2 years ago

  • Milestone changed from Awaiting Review to 6.1
  • Version trunk deleted

Hi @sabbirmc, welcome to Trac! Thanks for opening this ticket.

@tushar284, thanks for the patch! This looks good to me.

#4 @costdev
2 years ago

  • Keywords commit added

#5 @desrosj
2 years ago

  • Component changed from Administration to General

#6 @desrosj
2 years ago

  • Resolution set to fixed
  • Status changed from new to closed

Fixed in [53656].

Note: See TracTickets for help on using tickets.