Opened 13 years ago
Closed 13 years ago
#5396 closed defect (bug) (fixed)
Improve string escaping in wp-admin/Profile
| Reported by: | imath | Owned by: | imath |
|---|---|---|---|
| Priority: | normal | Milestone: | 2.0 |
| Component: | Administration | Version: | |
| Severity: | normal | Keywords: | has-patch commit |
| Cc: |
Description
As DJPaul explained me : it's better to move the esc_html closer to the output on the screen.
Attachments (1)
Change History (3)
Note:
See TracTickets
for help on using tickets.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)
The
esc_url()change seems like the only significant one here. The other moves are just for the (good) convention of escaping just before output; they're functionally identical. But yes, please go for it.