WordPress.org
Get WordPress

Make WordPress Core

Opened 3 years ago

Last modified 21 months ago

#59337 new defect (bug)

Change the escape esc_attr() to esc_url()

Reported by: truptikanzariya Owned by:
Priority: normal Milestone: Awaiting Review
Component: Users Version:
Severity: normal Keywords: has-patch close 2nd-opinion
Cc: Focuses: coding-standards

Description

Change the esc_attr() function to esc_url() in "wp-admin/user-edit.php"

Change History (3)

#2 @jakariaistauk
3 years ago

hi @truptikanzariya
Your change to use esc_url instead of esc_attr makes a lot of sense. It's a safer option for handling URLs in this context. on the same file "wp-admin/user-edit.php:261" esc_url is used instead of esc_attr. thanks for your change.

Last edited 3 years ago by jakariaistauk (previous) (diff)

#3 @sabernhardt
21 months ago

  • Component General → Users
  • Keywords close 2nd-opinion added

#56140 proposed a similar edit in user-new.php, and that change was considered unnecessary.

Note: See TracTickets for help on using tickets.