WordPress.org
Get WordPress

Make WordPress Core

Opened 4 weeks ago

Last modified 4 weeks ago

#63297 new defect (bug)

Add escaping on class variable in themes.php file

Reported by: harishtewari's profile harishtewari Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Themes Keywords: has-patch close
Focuses: coding-standards Cc:

Description

Escaping HTML attributes in themes.php file on line 435

Change History (4)

#3 @sabernhardt
4 weeks ago

  • Keywords close added

Thanks for the ticket and patch!

The $active_class variable is either ' active' or an empty string, and those would not require escaping.

I think this should be closed for the same reason as #58251, #59626 and #61378.

#4 @SergeyBiryukov
4 weeks ago

  • Component changed from General to Themes
Note: See TracTickets for help on using tickets.