Changeset 61427 for trunk/src/wp-content/themes/twentytwelve/search.php

Timestamp:

01/03/2026 10:24:48 PM (7 months ago)

Author:

SergeyBiryukov

Message:

Bundled Themes: Consistently escape get_search_query() in search.php templates.

Props sabernhardt, himshekhar07, petitphp, karmatosed, SergeyBiryukov.
Fixes #58127.

File:

• trunk/src/wp-content/themes/twentytwelve/search.php (modified) (1 diff)

trunk/src/wp-content/themes/twentytwelve/search.php

@@ -19 +19 @@
                                 <?php
                                 /* translators: %s: Search query. */
-                                printf( __( 'Search Results for: %s', 'twentytwelve' ), '<span>' . get_search_query() . '</span>' );
+                                printf( __( 'Search Results for: %s', 'twentytwelve' ), '<span>' . esc_html( get_search_query( false ) ) . '</span>' );
                                 ?>
                                 </h1>