Make WordPress Core

Changeset 51190


Ignore:
Timestamp:
06/21/2021 06:05:30 AM (3 years ago)
Author:
SergeyBiryukov
Message:

Users: Escape get_author_posts_url() link in wp_list_authors().

This is consistent with get_the_author_posts_link().

Props chintan1896.
Fixes #50698.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/author-template.php

    r49672 r51190  
    475475        $link = sprintf(
    476476            '<a href="%1$s" title="%2$s">%3$s</a>',
    477             get_author_posts_url( $author->ID, $author->user_nicename ),
     477            esc_url( get_author_posts_url( $author->ID, $author->user_nicename ) ),
    478478            /* translators: %s: Author's display name. */
    479479            esc_attr( sprintf( __( 'Posts by %s' ), $author->display_name ) ),
Note: See TracChangeset for help on using the changeset viewer.