Missing dot at the end of the descriptions

[kapasias]

In this file wp-includes/formatting.php
Added missing dots and improve function esc_attr( $text )
unsafe event handler attributes (like onclick, onmouseover, etc.) from HTML elements.

[kapasias]

Example

function custom_message_shortcode() {

	$value1 = 'onmouseover=alert("XSS")';
	$value2 = 'Text with Space';
	$value3 = 'abc = xyz';

    return '<div '.esc_html($value1).' '.esc_attr($value3).' class="custom-message">'.esc_attr($value2).'</div>';

}
add_shortcode('custom_message', 'custom_message_shortcode');

This line of code uses preg_replace() to sanitize a string by removing potentially unsafe event handler attributes (like onclick, onmouseover, etc.) from HTML elements.

This is a security measure to prevent malicious JavaScript from being executed via event handler attributes in user-supplied content. It helps mitigate risks like Cross-Site Scripting (XSS).

Before Update Function : ​https://prnt.sc/4LfxABLmaM2o

After Update Function : ​https://prnt.sc/ZYIWFxjYCDnN

so preg_replace( '/\s*on\w+\s*=\s*["\']?.*?["\']?/i', '', $safe_text ); line
sanitized and escaped html

[swissspidy]

Hi there,

You're really mixing two completely different things in this ticket — docblock improvements and changes to a crucial function.

Also, what you are missing is that esc_attr() is supposed to escape attribute values, not attribute names. So your example is wrong and thus the change doesn't make sense.

Let's focus on the docblock improvements :-)

[kapasias]

ok focus on docblock improvements

Trac ticket: #62885

## Description
Implements the changes from this diff in accordance with this comment. Additionally, I have identified and corrected a few other instances in the file where periods were missing at the end of sentences.

## Changes:

• Added missing periods to @return documentation blocks
• Added missing periods to @param descriptions
• Added missing periods to complete sentence inline comments
• Added missing periods to section marker comments ("START: emoji arrays")

Hi @peterwilsoncc,
I have made the necessary changes. Please review it at your convenience.
Thank You!

[SergeyBiryukov]

In 59765:

Docs: Update comments in wp-includes/formatting.php per the documentation standards.

Follow-up to [1345], [8662], [8786], [33624], [34761].

Props kapasias, ankitkumarshah, swissspidy, peterwilsoncc.
Fixes #62885.

Thanks for the PR! Merged in r59765.