Changeset 20233 for trunk/wp-includes/class-wp-theme.php

Timestamp:

03/21/2012 02:51:10 PM (12 years ago)

Author:

nacin

Message:

Sanitize Theme URI and Author URI in WP_Theme with esc_url_raw. Escape with esc_url on display. see #20103.

File:

• trunk/wp-includes/class-wp-theme.php (modified) (2 diffs)

trunk/wp-includes/class-wp-theme.php

@@ -580 +580 @@
             case 'ThemeURI' :
             case 'AuthorURI' :
-                $value = esc_url( $value );
+                $value = esc_url_raw( $value );
                 break;
             case 'Tags' :
@@ -628 +628 @@
                 $value = implode( $comma, $value );
                 break;
+            case 'ThemeURI' :
+            case 'AuthorURI' :
+                $value = esc_url( $value );
+                break;
         }