Changeset 53656

Timestamp:

07/05/2022 02:12:06 PM (2 years ago)

Author:

desrosj

Message:

General: Properly escape home_url() links in wp_page_menu().

Props sabbirmc, tushar284, costdev.
Fixes 56148.

File:

• trunk/src/wp-includes/post-template.php (modified) (1 diff)

trunk/src/wp-includes/post-template.php

@@ -1444 +1444 @@
             $class = 'class="current_page_item"';
         }
-        $menu .= '<li ' . $class . '><a href="' . home_url( '/' ) . '">' . $args['link_before'] . $text . $args['link_after'] . '</a></li>';
+        $menu .= '<li ' . $class . '><a href="' . esc_url( home_url( '/' ) ) . '">' . $args['link_before'] . $text . $args['link_after'] . '</a></li>';
         // If the front page is a page, add it to the exclude list.
         if ( 'page' === get_option( 'show_on_front' ) ) {