Changeset 31250 for trunk/src/wp-content/themes/twentyfourteen/image.php

Timestamp:

01/20/2015 07:02:53 PM (12 years ago)

Author:

lancewillett

Message:

Twenty Fourteen: fix escaping and minor code style issues. See #29127.

File:

• trunk/src/wp-content/themes/twentyfourteen/image.php (modified) (1 diff)

trunk/src/wp-content/themes/twentyfourteen/image.php

@@ -29 +29 @@
                                                 <span class="entry-date"><time class="entry-date" datetime="<?php echo esc_attr( get_the_date( 'c' ) ); ?>"><?php echo esc_html( get_the_date() ); ?></time></span>
 
-                                                <span class="full-size-link"><a href="<?php echo esc_url( wp_get_attachment_url() ); ?>"><?php echo $metadata['width']; ?> &times; <?php echo $metadata['height']; ?></a></span>
+                                                <span class="full-size-link"><a href="<?php echo esc_url( wp_get_attachment_url() ); ?>"><?php echo esc_html( $metadata['width'] ); ?> &times; <?php echo esc_html( $metadata['height'] ); ?></a></span>
 
                                                 <span class="parent-post-link"><a href="<?php echo esc_url( get_permalink( $post->post_parent ) ); ?>" rel="gallery"><?php echo get_the_title( $post->post_parent ); ?></a></span>