Changeset 44500 for trunk/src/wp-content/themes/twentyeleven/header.php

Timestamp:

01/09/2019 06:10:13 AM (6 years ago)

Author:

pento

Message:

Bundled Themes: Run the pingback_url through esc_url().

Twenties Ten through Seventeen have been updated to properly escape the pingback URL. Twenty Nineteen is already escaping the URL.

Props soulseekah, sharaz.
Fixes #43717.

File:

• trunk/src/wp-content/themes/twentyeleven/header.php (modified) (1 diff)

trunk/src/wp-content/themes/twentyeleven/header.php

@@ -50 +50 @@
 <link rel="profile" href="http://gmpg.org/xfn/11" />
 <link rel="stylesheet" type="text/css" media="all" href="<?php bloginfo( 'stylesheet_url' ); ?>" />
-<link rel="pingback" href="<?php bloginfo( 'pingback_url' ); ?>" />
+<link rel="pingback" href="<?php echo esc_url( get_bloginfo( 'pingback_url' ) ); ?>">
 <!--[if lt IE 9]>
 <script src="<?php echo get_template_directory_uri(); ?>/js/html5.js" type="text/javascript"></script>