Changeset 52949

Timestamp:

03/18/2022 01:42:34 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Themes: Use esc_url() for theme screenshots on the Themes screen.

This brings consistency with how screenshots are escaped elsewhere.

Follow-up to [52020], [52947].

See #53370.

File:

• trunk/src/wp-admin/themes.php (modified) (1 diff)

trunk/src/wp-admin/themes.php

@@ -389 +389 @@
     <?php if ( ! empty( $theme['screenshot'][0] ) ) { ?>
         <div class="theme-screenshot">
-            <img src="<?php echo esc_attr( $theme['screenshot'][0] . '?ver=' . $theme['version'] ); ?>" alt="" />
+            <img src="<?php echo esc_url( $theme['screenshot'][0] . '?ver=' . $theme['version'] ); ?>" alt="" />
         </div>
     <?php } else { ?>