Changeset 53642 for trunk

Timestamp:

07/04/2022 10:09:45 AM (4 years ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Escape the home URL in the "Header updated. Visit your site" message.

This affects Custom_Image_Header::step_1().

Follow-up to [12890], [45654].

Props jakariaistauk, rudlinkon, hztyfoon, costdev.
Fixes #56132.

File:

• trunk/src/wp-admin/includes/class-custom-image-header.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-custom-image-header.php

@@ -522 +522 @@
                         <?php
                         /* translators: %s: Home URL. */
-                        printf( __( 'Header updated. <a href="%s">Visit your site</a> to see how it looks.' ), home_url( '/' ) );
+                        printf( __( 'Header updated. <a href="%s">Visit your site</a> to see how it looks.' ), esc_url( home_url( '/' ) ) );
                         ?>
         </p>