Changeset 26316 for trunk/src/wp-admin/includes/theme.php

Timestamp:

11/22/2013 02:33:19 AM (11 years ago)

Author:

dd32

Message:

Themes: Move the escaping of content from JS back to PHP. This allows us to take advantage of the display() WP_Theme method to translate the text properly, and to strip out any HTML tags we don't wish to display. Fixes #26100. See #25948

File:

• trunk/src/wp-admin/includes/theme.php (modified) (1 diff)

trunk/src/wp-admin/includes/theme.php

@@ -406 +406 @@
             'screenshot'   => array( $theme->get_screenshot() ), // @todo multiple
             'description'  => $theme->display( 'Description' ),
-            'author'       => $theme->get( 'Author' ),
-            'authorURI'    => $theme->get( 'AuthorURI' ),
-            'version'      => $theme->get( 'Version' ),
-            'tags'         => $theme->get( 'Tags' ),
+            'author'       => $theme->display( 'Author' ),
+            'version'      => $theme->display( 'Version' ),
+            'tags'         => $theme->display( 'Tags' ),
             'parent'       => $parent,
             'active'       => $slug === $current_theme,