Changeset 54344

Timestamp:

09/28/2022 12:38:49 PM (2 years ago)

Author:

audrasjb

Message:

Twenty Ten: Escape get_author_posts_url() where appropriate in functions.php file.

This changeset adds missing escaping to some instances of get_author_posts_url() used in Twenty Ten, as per WordPress Coding Standards.

Props hztyfoon, robinwpdeveloper, mukesh27, rudlinkon, SergeyBiryukov, jakariaistauk.
Fixes #56674.

Location:

trunk/src/wp-content/themes/twentyten

Files:

• functions.php (modified) (1 diff)
• loop-attachment.php (modified) (1 diff)

trunk/src/wp-content/themes/twentyten/functions.php

@@ -614 +614 @@
             sprintf(
                 '<span class="author vcard"><a class="url fn n" href="%1$s" title="%2$s">%3$s</a></span>',
-                get_author_posts_url( get_the_author_meta( 'ID' ) ),
+                esc_url( get_author_posts_url( get_the_author_meta( 'ID' ) ) ),
                 /* translators: %s: Author display name. */
                 esc_attr( sprintf( __( 'View all posts by %s', 'twentyten' ), get_the_author() ) ),

trunk/src/wp-content/themes/twentyten/loop-attachment.php

@@ -46 +46 @@
                                 sprintf(
                                     '<span class="author vcard"><a class="url fn n" href="%1$s" title="%2$s" rel="author">%3$s</a></span>',
-                                    get_author_posts_url( get_the_author_meta( 'ID' ) ),
+                                    esc_url( get_author_posts_url( get_the_author_meta( 'ID' ) ) ),
                                     /* translators: %s: Author display name. */
                                     esc_attr( sprintf( __( 'View all posts by %s', 'twentyten' ), get_the_author() ) ),