Changeset 26316 for trunk/src/wp-admin/themes.php

Timestamp:

11/22/2013 02:33:19 AM (11 years ago)

Author:

dd32

Message:

Themes: Move the escaping of content from JS back to PHP. This allows us to take advantage of the display() WP_Theme method to translate the text properly, and to strip out any HTML tags we don't wish to display. Fixes #26100. See #25948

File:

• trunk/src/wp-admin/themes.php (modified) (3 diffs)

trunk/src/wp-admin/themes.php

@@ -216 +216 @@
         <img src="{{ data.screenshot[0] }}" alt="" />
     </div>
-    <div class="theme-author"><?php printf( __( 'By %s' ), '{{ data.author }}' ); ?></div>
+    <div class="theme-author"><?php printf( __( 'By %s' ), '{{{ data.author }}}' ); ?></div>
     <h3 class="theme-name">{{ data.name }}</h3>
     <div class="theme-actions">
@@ -267 +267 @@
                 <span class="current-label"><?php _e( 'Current Theme' ); ?></span>
             <# } #>
-            <h3 class="theme-name">{{ data.name }}<span class="theme-version"><?php _e('Version: '); ?> {{ data.version }}</span></h3>
-            <# if ( data.authorURI ) { #>
-                <h4 class="theme-author"><?php printf( __( 'By %s' ), '<a href="{{ data.authorURI }}">{{ data.author }}</a>' ); ?></h4>
-            <# } else { #>
-                <h4 class="theme-author"><?php printf( __( 'By %s' ), '{{ data.author }}' ); ?></h4>
-            <# } #>
+            <h3 class="theme-name">{{{ data.name }}}<span class="theme-version"><?php printf( __( 'Version: %s' ), '{{{ data.version }}}' ); ?></span></h3>
+            <h4 class="theme-author"><?php printf( __( 'By %s' ), '{{{ data.author }}}' ); ?></h4>
 
             <# if ( data.hasUpdate ) { #>
@@ -283 +279 @@
 
             <# if ( data.parent ) { #>
-                <p class="parent-theme"><?php printf( __( 'This is a child theme of <strong>%s</strong>.' ), '{{ data.parent }}' ); ?></p>
+                <p class="parent-theme"><?php printf( __( 'This is a child theme of <strong>%s</strong>.' ), '{{{ data.parent }}}' ); ?></p>
             <# } #>
 
-            <# if ( data.tags.length !== 0 ) { #>
+            <# if ( data.tags ) { #>
                 <p class="theme-tags">
                     <span><?php _e( 'Tags:' ); ?></span>
-                    {{{ data.tags.join( ', ' ).replace( /-/g, ' ' ) }}}
+                    {{{ data.tags.replace( /-/g, ' ' ) }}}
                 </p>
             <# } #>