WordPress.org

Make WordPress Core

Changeset 20233


Ignore:
Timestamp:
03/21/2012 02:51:10 PM (8 years ago)
Author:
nacin
Message:

Sanitize Theme URI and Author URI in WP_Theme with esc_url_raw. Escape with esc_url on display. see #20103.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/class-wp-theme.php

    r20193 r20233  
    580580            case 'ThemeURI' :
    581581            case 'AuthorURI' :
    582                 $value = esc_url( $value );
     582                $value = esc_url_raw( $value );
    583583                break;
    584584            case 'Tags' :
     
    628628                $value = implode( $comma, $value );
    629629                break;
     630            case 'ThemeURI' :
     631            case 'AuthorURI' :
     632                $value = esc_url( $value );
     633                break;
    630634        }
    631635
Note: See TracChangeset for help on using the changeset viewer.