Changeset 51177 for trunk/src/wp-admin/about.php

Timestamp:

06/17/2021 02:35:59 PM (5 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-admin/about.php (modified) (2 diffs)

trunk/src/wp-admin/about.php

@@ -24 +24 @@
                 <div class="about__header">
                         <div class="about__header-image">
-                                <img alt="<?php _e( 'Code is Poetry' ); ?>" src="<?php echo admin_url( 'images/about-badge.svg' ); ?>" />
+                                <img alt="<?php _e( 'Code is Poetry' ); ?>" src="<?php echo esc_url( admin_url( 'images/about-badge.svg' ) ); ?>" />
                         </div>
 
@@ -180 +180 @@
                         <div class="column about__image">
                                 <picture>
-                                        <source media="(max-width: 600px)" srcset="<?php echo admin_url( 'images/about-color-palette-vert.svg' ); ?>" />
-                                        <img alt="" src="<?php echo admin_url( 'images/about-color-palette.svg' ); ?>" />
+                                        <source media="(max-width: 600px)" srcset="<?php echo esc_url( admin_url( 'images/about-color-palette-vert.svg' ) ); ?>" />
+                                        <img alt="" src="<?php echo esc_url( admin_url( 'images/about-color-palette.svg' ) ); ?>" />
                                 </picture>
                         </div>