You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
echo "<ahref='$escaped_link'>text with a ' single quote</a>";
19
+
echo "<ahref='{$escaped_link}'>text with a ' single quote</a>";
20
20
```
21
21
22
22
Text that goes into HTML or XML attributes should be escaped so that single or double quotes do not end the attribute value and invalidate the HTML, causing a security issue. See [Data Validation](https://developer.wordpress.org/plugins/security/data-validation/) in the Plugin Handbook for further details.
0 commit comments