Bookmark Administration on edit_link function in extra remove ( $_POST['link_url'] = esc_html( $_POST['link_url'] ); )

[utsav72640]

I have checked in edit_link function on wp-admin/includes/bookmark.php

And if I look at the code there are add an extra esc_html function to sanitize the ( $_POSTlink_url? ).

After reviewing the example provided for the add_link action, it appears that there is no need to include an esc_html function when handling the ( $_POSTlink_url? ) parameter.

Can you please check my patch and share your feedback.

[utsav72640]

wp-admin/includes/bookmark.php

[utsav72640]

Also I have added in git a new pull request can you please check and let me know if there are any changes or not.

​https://github.com/WordPress/wordpress-develop/pull/4415

I have checked in edit_link function on wp-admin/includes/bookmark.php

And if I look at the code there are add an extra esc_html function to sanitize the ( $_POSTlink_url? ).

After reviewing the example provided for the add_link action, it appears that there is no need to include an esc_html function when handling the ( $_POSTlink_url? ) parameter.

Can you please check my patch and share your feedback.

Trac Ticket: https://core.trac.wordpress.org/ticket/58239

EDITED by @audrasjb to add a link to the Trac ticket

[audrasjb]

Hello @utsav72640,

The duplication issue looks relevant to me, thanks.

However, there is a conflict in your PR, and you also have an unrelated change to /wp-admin/includes/user.php.

[utsav72640]

Hello @audrasjb

Could you please review the updated patch I submitted? If any additional changes are required, please let me know and I will make the necessary updates to the PR.

[audrasjb]

Historical context: this was introduced in [11383] when clean_url() was deprecated in favor of esc_url().

[audrasjb]

Replying to utsav72640:

Could you please review the updated patch I submitted? If any additional changes are required, please let me know and I will make the necessary updates to the PR.

Already reviewed in comment:3 ;)

As per our audrasjb conversation i will closed this PR because it's conflict in user.php file so i am close this pull request and i will add new pull request.

[utsav72640]

Hello @audrasjb

I have added in git a new pull request can you please check and let me know if there are any changes or not.

​https://github.com/WordPress/wordpress-develop/pull/4416

[audrasjb]

Replying to utsav72640:

I have added in git a new pull request can you please check and let me know if there are any changes or not.

Thanks.

Just an important note: you don't need to add a link to your PR in a message here in Trac. Just add the link to the Trac ticket and your PR will automatically appear here on Trac. See the edition I made to your PR. Thanks.

I have checked in edit_link function on wp-admin/includes/bookmark.php

And if I look at the code there are add an extra esc_html function to sanitize the ( $_POSTlink_url? ).

After reviewing the example provided for the add_link action, it appears that there is no need to include an esc_html function when handling the ( $_POSTlink_url? ) parameter.

Can you please check my patch and share your feedback.

EDITED by @audrasjb to add a link to the Trac ticket
Trac Ticket: https://core.trac.wordpress.org/ticket/58239

[audrasjb]

In 55704:

Coding Standards: Remove unnecessary variable escapement in Bookmark Administration API.

This changeset removes an unnecessary esc_html() escapement for link_url, as esc_url() already does the job.

Follow-up to [11383].

Props utsav72640, audrasjb.
Fixes #58239.

Committed in https://core.trac.wordpress.org/changeset/55704