Automattic / Automattic/VIP-Coding-Standards
include `url(' . esc_url_raw()` to proper escaping function sniff
Open
Status: Awaiting feedback
Type: Enhancement
- Dominant language
- PHP
- Stars
- 261
- Forks
- 44
- Avg merge
- 19m
- Merged PRs (30d)
- 1
Description
We probably should enforce esc_url for any urls.
Contributor guide
Research direction
Start by locating the PHP_CodeSniffer sniff responsible for URL escaping and any accompanying tests. Determine which URL patterns and escaping functions are in scope, then add coverage for enforcing the requested esc_url handling and run the relevant checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100