Changeset 14208 for trunk/wp-includes/link-template.php

Timestamp:

04/23/2010 09:23:32 PM (15 years ago)

Author:

westi

Message:

Switch to using esc_url{_raw} for the shortlink output as it is a url not just any attribute. Fixes #10640.

File:

• trunk/wp-includes/link-template.php (modified) (2 diffs)

trunk/wp-includes/link-template.php

@@ -2205 +2205 @@
         return;
 
-    echo "<link rel='shortlink' href='" . esc_attr( $shortlink ) . "' />\n";
+    echo "<link rel='shortlink' href='" . esc_url_raw( $shortlink ) . "' />\n";
 }
 
@@ -2255 +2255 @@
 
     if ( !empty( $shortlink ) ) {
-        $link = '<a rel="shortlink" href="' . esc_attr( $shortlink ) . '" title="' . $title . '">' . $text . '</a>';
+        $link = '<a rel="shortlink" href="' . esc_url( $shortlink ) . '" title="' . $title . '">' . $text . '</a>';
         $link = apply_filters( 'the_shortlink', $link, $shortlink, $text, $title );
         echo $before, $link, $after;