Changeset 55240

Timestamp:

02/06/2023 09:34:56 PM (15 months ago)

Author:

audrasjb

Message:

Coding Standards: Add missing escaping function in Custom_Image_Header::show_header_selector().

Props chintan1896, SergeyBiryukov.
Fixes #57638.

File:

• trunk/src/wp-admin/includes/class-custom-image-header.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-custom-image-header.php

@@ -333 +333 @@
                 $width = ' width="230"';
             }
-            echo '<img src="' . set_url_scheme( $header_thumbnail ) . '" alt="' . esc_attr( $header_alt_text ) . '"' . $width . ' /></label>';
+            echo '<img src="' . esc_url( set_url_scheme( $header_thumbnail ) ) . '" alt="' . esc_attr( $header_alt_text ) . '"' . $width . ' /></label>';
             echo '</div>';
         }