Opened 12 years ago
Closed 12 years ago
#5396 closed defect (bug) (fixed)
Improve string escaping in wp-admin/Profile
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Milestone: | 2.0 | Priority: | normal |
| Severity: | normal | Version: | |
| Component: | Administration | Keywords: | has-patch commit |
| Cc: |
Description
As DJPaul explained me : it's better to move the esc_html closer to the output on the screen.
Attachments (1)
Change History (3)
Note: See
TracTickets for help on using
tickets.
The
esc_url()change seems like the only significant one here. The other moves are just for the (good) convention of escaping just before output; they're functionally identical. But yes, please go for it.