WordPress.org

Make WordPress Core


Ignore:
Timestamp:
01/09/2019 06:10:13 AM (2 years ago)
Author:
pento
Message:

Bundled Themes: Run the pingback_url through esc_url().

Twenties Ten through Seventeen have been updated to properly escape the pingback URL. Twenty Nineteen is already escaping the URL.

Props soulseekah, sharaz.
Fixes #43717.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-content/themes/twentyseventeen/functions.php

    r44479 r44500  
    411411function twentyseventeen_pingback_header() {
    412412    if ( is_singular() && pings_open() ) {
    413         printf( '<link rel="pingback" href="%s">' . "\n", get_bloginfo( 'pingback_url' ) );
     413        printf( '<link rel="pingback" href="%s">' . "\n", esc_url( get_bloginfo( 'pingback_url' ) ) );
    414414    }
    415415}
Note: See TracChangeset for help on using the changeset viewer.