WordPress.org
Get WordPress

Make WordPress Core

Opened 13 months ago

Closed 8 months ago

Last modified 8 months ago

#59278 closed defect (bug) (fixed)

Missing esc_attr() in class-custom-image-header.php

Reported by: nareshbheda's profile nareshbheda Owned by: sergeybiryukov's profile SergeyBiryukov
Milestone: 6.5 Priority: normal
Severity: normal Version:
Component: General Keywords: has-patch
Focuses: coding-standards Cc:

Description

Found missing esc_attr() width and height in "wp-admin/includes/class-custom-image-header.php"

Change History (7)

​@audrasjb commented on ​PR #5132:
13 months ago #2

Thanks for the PR. FWIW there is at least one other occurrence in this file:

​@nareshbheda commented on ​PR #5132:
13 months ago #3

@audrasjb Thank you for the suggestion, I have applied your suggestion in the latest commit.

​@kebbet commented on ​PR #5132:
13 months ago #4

Why add escaping in line 341, it does not make sense @audrasjb?

#5 @SergeyBiryukov
8 months ago

  • Milestone changed from Awaiting Review to 6.5

#6 @SergeyBiryukov
8 months ago

  • Owner set to SergeyBiryukov
  • Resolution set to fixed
  • Status changed from new to closed

In 57364:

Coding Standards: Add missing escaping in Custom_Image_Header::step_2().

Follow-up to [4673], [14907].

Props nareshbheda, audrasjb, kebbet.
Fixes #59278.

​@SergeyBiryukov commented on ​PR #5132:
8 months ago #7

Thanks for the PR! Merged in r57364.

Note: See TracTickets for help on using tickets.