Changeset 13297 for trunk/wp-includes/class-oembed.php

Timestamp:

02/22/2010 06:15:10 PM (15 years ago)

Author:

nacin

Message:

Use esc_url() instead of clean_url(). See #12309

File:

• trunk/wp-includes/class-oembed.php (modified) (2 diffs)

trunk/wp-includes/class-oembed.php

@@ -216 +216 @@
 
                 $title = ( !empty($data->title) ) ? $data->title : '';
-                $return = '<img src="' . esc_attr( clean_url( $data->url ) ) . '" alt="' . esc_attr($title) . '" width="' . esc_attr($data->width) . '" height="' . esc_attr($data->height) . '" />';
+                $return = '<img src="' . esc_url( $data->url ) . '" alt="' . esc_attr($title) . '" width="' . esc_attr($data->width) . '" height="' . esc_attr($data->height) . '" />';
                 break;
 
@@ -225 +225 @@
 
             case 'link':
-                $return = ( !empty($data->title) ) ? '<a href="' . clean_url($url) . '">' . esc_html($data->title) . '</a>' : false;
+                $return = ( !empty($data->title) ) ? '<a href="' . esc_url($url) . '">' . esc_html($data->title) . '</a>' : false;
                 break;