WordPress.org
Get WordPress

Make WordPress Core

Opened 3 years ago

Closed 3 years ago

#59190 closed defect (bug) (fixed)

Escaping function is missing in $post_type

Reported by: viralsampat Owned by: peterwilsoncc
Priority: normal Milestone: 6.4
Component: Administration Version: 2.9
Severity: normal Keywords: dev-feedback needs-patch
Cc: Focuses:

Description

Hello Team,

I have checked wordpress core files and found that the Escaping function needs to be added to the edit.php file for the $post_type variable.

Thanks,

Attachments (1)

59190.diff​ (866 bytes ) - added by viralsampat 3 years ago.
I have added patch and resolved this issue.

Download all attachments as: .zip

Change History (3)

@viralsampat
3 years ago

I have added patch and resolved this issue.

#1 @peterwilsoncc
3 years ago

  • Milestone Awaiting Review → 6.4
  • Owner set to peterwilsoncc
  • Status new → assigned
  • Version 6.3 → 2.9

Thanks for the ticket and the patch, @viralsampat.

This was introduced in #9674 for WordPress 2.9 so I've updated the version to reflect that. I've added this to the next milestone for commit.

#2 @peterwilsoncc
3 years ago

  • Resolution → fixed
  • Status assigned → closed

In 56456:

Administration: Escape post type output as field attribute.

Props viralsampat.
Fixes #59190.

Note: See TracTickets for help on using tickets.