Make WordPress Core

Changeset 57364


Ignore:
Timestamp:
01/26/2024 02:18:14 PM (4 months ago)
Author:
SergeyBiryukov
Message:

Coding Standards: Add missing escaping in Custom_Image_Header::step_2().

Follow-up to [4673], [14907].

Props nareshbheda, audrasjb, kebbet.
Fixes #59278.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/class-custom-image-header.php

    r57169 r57364  
    935935
    936936    <div id="crop_image" style="position: relative">
    937         <img src="<?php echo esc_url( $url ); ?>" id="upload" width="<?php echo $width; ?>" height="<?php echo $height; ?>" alt="" />
     937        <img src="<?php echo esc_url( $url ); ?>" id="upload" width="<?php echo esc_attr( $width ); ?>" height="<?php echo esc_attr( $height ); ?>" alt="" />
    938938    </div>
    939939
Note: See TracChangeset for help on using the changeset viewer.