Changeset 44500 for trunk/src/wp-content/themes/twentyseventeen/functions.php

Timestamp:

01/09/2019 06:10:13 AM (5 years ago)

Author:

pento

Message:

Bundled Themes: Run the pingback_url through esc_url().

Twenties Ten through Seventeen have been updated to properly escape the pingback URL. Twenty Nineteen is already escaping the URL.

Props soulseekah, sharaz.
Fixes #43717.

File:

• trunk/src/wp-content/themes/twentyseventeen/functions.php (modified) (1 diff)

trunk/src/wp-content/themes/twentyseventeen/functions.php

@@ -411 +411 @@
 function twentyseventeen_pingback_header() {
     if ( is_singular() && pings_open() ) {
-        printf( '<link rel="pingback" href="%s">' . "\n", get_bloginfo( 'pingback_url' ) );
+        printf( '<link rel="pingback" href="%s">' . "\n", esc_url( get_bloginfo( 'pingback_url' ) ) );
     }
 }