Changeset 51177 for trunk/src/wp-admin/credits.php

Timestamp:

06/17/2021 02:35:59 PM (4 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-admin/credits.php (modified) (1 diff)

trunk/src/wp-admin/credits.php

@@ -23 +23 @@
     <div class="about__header">
         <div class="about__header-image">
-            <img alt="<?php _e( 'Code is Poetry' ); ?>" src="<?php echo admin_url( 'images/about-badge.svg' ); ?>" />
+            <img alt="<?php _e( 'Code is Poetry' ); ?>" src="<?php echo esc_url( admin_url( 'images/about-badge.svg' ) ); ?>" />
         </div>