WordPress.org

Make WordPress Core


Ignore:
Timestamp:
01/07/2019 12:47:38 PM (2 years ago)
Author:
SergeyBiryukov
Message:

Taxonomy: Escape feed_image argument in Walker_Category::start_el().

See [11838] for the instance in wp_list_authors().

Props abhijitrakas.
See #44880.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/class-walker-category.php

    r43605 r44413  
    147147                $link .= $name;
    148148            } else {
    149                 $link .= "<img src='" . $args['feed_image'] . "'$alt" . ' />';
     149                $link .= "<img src='" . esc_url( $args['feed_image'] ) . "'$alt" . ' />';
    150150            }
    151151            $link .= '</a>';
Note: See TracChangeset for help on using the changeset viewer.