Make WordPress Core


Ignore:
Timestamp:
05/02/2010 10:53:59 PM (14 years ago)
Author:
ryan
Message:

Escape links by default. Props alexkingorg. see #13051

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/general-template.php

    r14331 r14347  
    185185function wp_loginout($redirect = '', $echo = true) {
    186186    if ( ! is_user_logged_in() )
    187         $link = '<a href="' . esc_url( wp_login_url($redirect) ) . '">' . __('Log in') . '</a>';
     187        $link = '<a href="' . wp_login_url($redirect) . '">' . __('Log in') . '</a>';
    188188    else
    189         $link = '<a href="' . esc_url( wp_logout_url($redirect) ) . '">' . __('Log out') . '</a>';
     189        $link = '<a href="' . wp_logout_url($redirect) . '">' . __('Log out') . '</a>';
    190190
    191191    if ( $echo )
     
    21122112    }
    21132113
    2114     echo apply_filters( 'wp_admin_css', "<link rel='stylesheet' href='" . esc_url( wp_admin_css_uri( $file ) ) . "' type='text/css' />\n", $file );
     2114    echo apply_filters( 'wp_admin_css', "<link rel='stylesheet' href='" . wp_admin_css_uri( $file ) . "' type='text/css' />\n", $file );
    21152115    if ( 'rtl' == get_bloginfo( 'text_direction' ) )
    2116         echo apply_filters( 'wp_admin_css', "<link rel='stylesheet' href='" . esc_url( wp_admin_css_uri( "$file-rtl" ) ) . "' type='text/css' />\n", "$file-rtl" );
     2116        echo apply_filters( 'wp_admin_css', "<link rel='stylesheet' href='" . wp_admin_css_uri( "$file-rtl" ) . "' type='text/css' />\n", "$file-rtl" );
    21172117}
    21182118
Note: See TracChangeset for help on using the changeset viewer.