php 使用sprintf进行错误的转义

Posted 2021-05-04

echo sprintf( esc_html__( '%s | %s', 'ms-research' ), '123434', '<script>alert(\'Sprintf\')</script>' );

echo esc_html__( sprintf( '%s | %s', '1234', '<script>alert(\'adsfasdfasdf\')</script>' ), 'ms-research' );


printf( esc_html__( 'Your city is %1$s, and your zip code is %2$s.', 'my-text-domain' ), 'Thing', '<script>alert(\'codex\')</script>' );