![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 4 years ago
Closed 4 years ago
#57539 closed defect (bug) (invalid)
Missing escaping in admin comment list file
| Reported by: | aniketpatel | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Comments | Version: | |
| Severity: | normal | Keywords: | has-patch |
| Cc: | Focuses: |
Description
We have found escaping missing for some attributes in the class-wp-comments-list-table.php admin file and attached a patch for this bug.
Attachments (1)
Change History (2)
Note:
See TracTickets
for help on using tickets.
Thanks @aniketpatel, for the ticket and patch.
All the variables mentioned in PR are already escaped: https://github.com/WordPress/wordpress-develop/blob/trunk/src/wp-admin/includes/class-wp-comments-list-table.php#L684-L690 so I don't think it needs to escape again.