Changeset 44413

Timestamp:

01/07/2019 12:47:38 PM (6 years ago)

Author:

SergeyBiryukov

Message:

Taxonomy: Escape feed_image argument in Walker_Category::start_el().

See [11838] for the instance in wp_list_authors().

Props abhijitrakas.
See #44880.

File:

• trunk/src/wp-includes/class-walker-category.php (modified) (1 diff)

trunk/src/wp-includes/class-walker-category.php

@@ -147 +147 @@
                 $link .= $name;
             } else {
-                $link .= "<img src='" . $args['feed_image'] . "'$alt" . ' />';
+                $link .= "<img src='" . esc_url( $args['feed_image'] ) . "'$alt" . ' />';
             }
             $link .= '</a>';