Changeset 14347 for trunk/wp-includes/default-widgets.php

Timestamp:

05/02/2010 10:53:59 PM (16 years ago)

Author:

ryan

Message:

Escape links by default. Props alexkingorg. see #13051

File:

• trunk/wp-includes/default-widgets.php (modified) (1 diff)

trunk/wp-includes/default-widgets.php

@@ -645 +645 @@
             <ul id="recentcomments"><?php
             if ( $comments ) : foreach ( (array) $comments as $comment) :
-            echo  '<li class="recentcomments">' . /* translators: comments widget: 1: comment author, 2: post link */ sprintf(_x('%1$s on %2$s', 'widgets'), get_comment_author_link(), '<a href="' . esc_url( get_comment_link($comment->comment_ID) ) . '">' . get_the_title($comment->comment_post_ID) . '</a>') . '</li>';
+            echo  '<li class="recentcomments">' . /* translators: comments widget: 1: comment author, 2: post link */ sprintf(_x('%1$s on %2$s', 'widgets'), get_comment_author_link(), '<a href="' . get_comment_link($comment->comment_ID) . '">' . get_the_title($comment->comment_post_ID) . '</a>') . '</li>';
             endforeach; endif;?></ul>
         <?php echo $after_widget; ?>