Context Navigation

index.php

Timestamp:

01/03/2026 10:24:48 PM (7 months ago)

Author:

SergeyBiryukov

Message:

Bundled Themes: Consistently escape get_search_query() in search.php templates.

Props sabernhardt, himshekhar07, petitphp, karmatosed, SergeyBiryukov.
Fixes #58127.

File:

-              r56549
+              r61427
                 $archive_title = sprintf(
                         '%1$s %2$s',
+                        '%1$s &ldquo;%2$s&rdquo;',
                         '<span class="color-accent">' . __( 'Search:', 'twentytwenty' ) . '</span>',
                         '&ldquo;' . get_search_query() . '&rdquo;'
+                        esc_html( get_search_query( false ) )
                 );

Note: See TracChangeset for help on using the changeset viewer.