Changeset 11724

Timestamp:

07/20/2009 01:41:05 AM (16 years ago)

Author:

ryan

Message:

esc_url() for ()

File:

• trunk/wp-includes/comment-template.php (modified) (2 diffs)

trunk/wp-includes/comment-template.php

@@ -821 +821 @@
 
     /**
-     * Raw comment author information fetched from the comment cookies.
+     * Comment author information fetched from the comment cookies.
      *
      * @uses wp_get_current_commenter()
@@ -828 +828 @@
 
     /**
-     * The name of the current comment author escaped for use in attributes.  Use
-     * wp_get_current_commenter() to get the raw value.
+     * The name of the current comment author escaped for use in attributes.
      */
-    $comment_author = $commenter['comment_author'];
+    $comment_author = $commenter['comment_author']; // Escaped by sanitize_comment_cookies()
 
     /**
-     * The email address of the current comment author escaped for use in attributes.  Use
-     * wp_get_current_commenter() to get the raw value.
+     * The email address of the current comment author escaped for use in attributes.
      */ 
-    $comment_author_email = $commenter['comment_author_email'];
+    $comment_author_email = $commenter['comment_author_email'];  // Escaped by sanitize_comment_cookies()
 
     /**
-     * The url of the current comment author escaped for use in attributes.  Use
-     * wp_get_current_commenter() to get the raw value.
+     * The url of the current comment author escaped for use in attributes.
      */ 
-    $comment_author_url = $commenter['comment_author_url'];
+    $comment_author_url = esc_url($commenter['comment_author_url']);
 
     /** @todo Use API instead of SELECTs. */