Skip to:
Content

BuddyPress.org

Opened 11 years ago

Closed 11 years ago

Last modified 10 years ago

#6390 closed defect (bug) (fixed)

Nested escaping

Reported by: johnjamesjacoby Owned by: johnjamesjacoby
Priority: normal Milestone: 2.3
Component: Core Version: 1.5
Severity: normal Keywords: commit
Cc:

Description

There are a few places where calls to esc_url() are immediately and unnecessarily escaped again with esc_attr().

Imminent patch will clean these up for trunk.

Attachments (1)

6390.01.patch​ (1.9 KB ) - added by johnjamesjacoby 11 years ago.

Download all attachments as: .zip

Change History (3)

@johnjamesjacoby
11 years ago

#1 @johnjamesjacoby
11 years ago

  • Owner set to johnjamesjacoby
  • Resolution → fixed
  • Status new → closed

In 9791:

The esc_url() function does an adequate job of preparing URLs for output to the browser; there is no need to also call esc_attr() on the results. Fixes #6390.

#2 @DJPaul
10 years ago

  • Component Tools - Code Improvement → Core
Note: See TracTickets for help on using tickets.