Changeset 53643

Timestamp:

07/04/2022 10:12:53 AM (2 years ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Escape the home URL in the "Background updated. Visit your site" message.

This affects Custom_Background::admin_page().

Follow-up to [13041], [45662], [53642].

Props robinwpdeveloper, sajjad67, rudlinkon, hztyfoon, costdev.
Fixes #56133.

File:

• trunk/src/wp-admin/includes/class-custom-background.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-custom-background.php

@@ -251 +251 @@
             <?php
             /* translators: %s: Home URL. */
-            printf( __( 'Background updated. <a href="%s">Visit your site</a> to see how it looks.' ), home_url( '/' ) );
+            printf( __( 'Background updated. <a href="%s">Visit your site</a> to see how it looks.' ), esc_url( home_url( '/' ) ) );
             ?>
     </p>