Changeset 57369 for trunk/src/wp-includes/customize/class-wp-customize-nav-menu-location-control.php

Timestamp:

01/28/2024 07:48:15 AM (2 years ago)

Author:

audrasjb

Message:

Coding Standards: Add missing escaping functions to WP_Customize_Control and WP_Customize_Nav_Menu_Location_Control.

Follow-up to [20295], [32806].

Props nareshbheda, shailu25, sabernhardt, audrasjb.
Fixes #60324.

File:

• trunk/src/wp-includes/customize/class-wp-customize-nav-menu-location-control.php (modified) (1 diff)

trunk/src/wp-includes/customize/class-wp-customize-nav-menu-location-control.php

@@ -78 +78 @@
                 <?php
                 foreach ( $this->choices as $value => $label ) :
-                    echo '<option value="' . esc_attr( $value ) . '"' . selected( $this->value(), $value, false ) . '>' . $label . '</option>';
+                    echo '<option value="' . esc_attr( $value ) . '"' . selected( $this->value(), $value, false ) . '>' . esc_html( $label ) . '</option>';
                 endforeach;
                 ?>