WordPress / WordPress/WordPress-Coding-Standards
Include `htmlspecialchars` in list of escaping functions.
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 2.8k
- Forks
- 521
- Avg merge
- 5d 20h
- Merged PRs (30d)
- 1
Description
The PHP function htmlspecialchars is currently not recognized as a valid escaping function.
The function "converts special characters into HTML entities" (http://php.net/manual/en/function.htmlspecialchars.php).
It is actually what esc_textarea() is built upon.
It should be added to the list of escaping functions to be a valid way of getting rid of unneeded "Expected next thing to be an escaping function" errors.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the escaping-functions list used by the WordPress coding-standard sniff and review how existing escaping functions are recognized. Add htmlspecialchars to that list, then verify that the false “Expected next thing to be an escaping function” errors no longer occur for valid uses.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 48/100