WordPress.org

Make WordPress Core

Changeset 29400


Ignore:
Timestamp:
08/06/2014 07:50:59 AM (7 years ago)
Author:
nacin
Message:

Escape late in get_avatar().

Merges [29397] to the 3.7 branch.

Location:
branches/3.7
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/3.7

  • branches/3.7/src/wp-includes/pluggable.php

    r29388 r29400  
    17101710        $avatar = "<img alt='{$safe_alt}' src='{$out}' class='avatar avatar-{$size} photo' height='{$size}' width='{$size}' />";
    17111711    } else {
    1712         $avatar = "<img alt='{$safe_alt}' src='{$default}' class='avatar avatar-{$size} photo avatar-default' height='{$size}' width='{$size}' />";
     1712        $out = esc_url( $default );
     1713        $avatar = "<img alt='{$safe_alt}' src='{$out}' class='avatar avatar-{$size} photo avatar-default' height='{$size}' width='{$size}' />";
    17131714    }
    17141715
Note: See TracChangeset for help on using the changeset viewer.