Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ProperEscaping: Fix message for action attribute #575

Merged

Conversation

GaryJones
Copy link
Contributor

Recognise that a form action attribute expects to have a URL value, and therefore expected to be escaped with esc_url(), rather than esc_attr().

Fixes #554

Recognise that a form `action` attribute expects to have a URL value, and therefore expected to be escaped with `esc_url()`, rather than `esc_attr()`.

Fixes #554
@GaryJones GaryJones added this to the 2.2.0 milestone Aug 29, 2020
@GaryJones GaryJones requested a review from a team as a code owner August 29, 2020 11:51
@GaryJones GaryJones self-assigned this Aug 29, 2020
@rebeccahum rebeccahum merged commit 99f7959 into develop Aug 31, 2020
@rebeccahum rebeccahum deleted the fix/incorrect-message-for-proper-escaping-function branch August 31, 2020 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Incorrect message for Security.ProperEscapingFunction.htmlAttrNotByEscHTML
2 participants