Changeset 61427 for trunk/src/wp-content/themes/twentythirteen/search.php

Timestamp:

01/03/2026 10:24:48 PM (6 weeks ago)

Author:

SergeyBiryukov

Message:

Bundled Themes: Consistently escape get_search_query() in search.php templates.

Props sabernhardt, himshekhar07, petitphp, karmatosed, SergeyBiryukov.
Fixes #58127.

File:

• trunk/src/wp-content/themes/twentythirteen/search.php (modified) (1 diff)

trunk/src/wp-content/themes/twentythirteen/search.php

@@ -19 +19 @@
                 <?php
                 /* translators: %s: Search query. */
-                printf( __( 'Search Results for: %s', 'twentythirteen' ), get_search_query() );
+                printf( __( 'Search Results for: %s', 'twentythirteen' ), esc_html( get_search_query( false ) ) );
                 ?>
                 </h1>