Make WordPress Core


Ignore:
Timestamp:
10/07/2022 01:32:55 AM (2 years ago)
Author:
desrosj
Message:

Bundled Themes: Properly escape URLs.

This adds output escaping to several theme related URLs.

Props alberuni-azad, sabernhardt.
Fixes #56696.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-content/themes/twentyfourteen/header.php

    r52013 r54405  
    2626    <link rel="pingback" href="<?php echo esc_url( get_bloginfo( 'pingback_url' ) ); ?>">
    2727    <!--[if lt IE 9]>
    28     <script src="<?php echo get_template_directory_uri(); ?>/js/html5.js?ver=3.7.0"></script>
     28    <script src="<?php echo esc_url( get_template_directory_uri() ); ?>/js/html5.js?ver=3.7.0"></script>
    2929    <![endif]-->
    3030    <?php wp_head(); ?>
Note: See TracChangeset for help on using the changeset viewer.