WordPress.org
Get WordPress

Make WordPress Core

Opened 16 months ago

Last modified 2 months ago

#59337 new defect (bug)

Change the escape esc_attr() to esc_url()

Reported by: truptikanzariya's profile truptikanzariya Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Users Keywords: has-patch close 2nd-opinion
Focuses: coding-standards Cc:

Description

Change the esc_attr() function to esc_url() in "wp-admin/user-edit.php"

Change History (3)

#2 @jakariaistauk
16 months ago

hi @truptikanzariya
Your change to use esc_url instead of esc_attr makes a lot of sense. It's a safer option for handling URLs in this context. on the same file "wp-admin/user-edit.php:261" esc_url is used instead of esc_attr. thanks for your change.

Last edited 16 months ago by jakariaistauk (previous) (diff)

#3 @sabernhardt
2 months ago

  • Component changed from General to Users
  • Keywords close 2nd-opinion added

#56140 proposed a similar edit in user-new.php, and that change was considered unnecessary.

Note: See TracTickets for help on using tickets.