Changeset 11011 for trunk/wp-includes/comment-template.php

Timestamp:

04/20/2009 05:46:46 PM (15 years ago)

Author:

ryan

Message:

Add some CYA clean_url()s

File:

• trunk/wp-includes/comment-template.php (modified) (1 diff)

trunk/wp-includes/comment-template.php

@@ -994 +994 @@
 
     if ( get_option('comment_registration') && !$user_ID )
-        $link = '<a rel="nofollow" href="' . wp_login_url( get_permalink() ) . '">' . $login_text . '</a>';
+        $link = '<a rel="nofollow" href="' . clean_url( wp_login_url( get_permalink() ) ) . '">' . $login_text . '</a>';
     else
-        $link = "<a rel='nofollow' class='comment-reply-link' href='" . wp_specialchars( add_query_arg( 'replytocom', $comment->comment_ID ) ) . "#" . $respond_id . "' onclick='return addComment.moveForm(\"$add_below-$comment->comment_ID\", \"$comment->comment_ID\", \"$respond_id\", \"$post->ID\")'>$reply_text</a>";
+        $link = "<a rel='nofollow' class='comment-reply-link' href='" . clean_url( add_query_arg( 'replytocom', $comment->comment_ID ) ) . "#" . $respond_id . "' onclick='return addComment.moveForm(\"$add_below-$comment->comment_ID\", \"$comment->comment_ID\", \"$respond_id\", \"$post->ID\")'>$reply_text</a>";
     return apply_filters('comment_reply_link', $before . $link . $after, $args, $comment, $post);
 }