Changeset 57364

Timestamp:

01/26/2024 02:18:14 PM (10 months ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Add missing escaping in Custom_Image_Header::step_2().

Follow-up to [4673], [14907].

Props nareshbheda, audrasjb, kebbet.
Fixes #59278.

File:

• trunk/src/wp-admin/includes/class-custom-image-header.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-custom-image-header.php

@@ -935 +935 @@
 
     <div id="crop_image" style="position: relative">
-        <img src="<?php echo esc_url( $url ); ?>" id="upload" width="<?php echo $width; ?>" height="<?php echo $height; ?>" alt="" />
+        <img src="<?php echo esc_url( $url ); ?>" id="upload" width="<?php echo esc_attr( $width ); ?>" height="<?php echo esc_attr( $height ); ?>" alt="" />
     </div>