Changeset 5037 for trunk/includes/common/ajax.php

Timestamp:

07/17/2013 07:35:03 PM (13 years ago)

Author:

johnjamesjacoby

Message:

For all template functions that output URL's, always echo an escaped value using esc_url(). See #2367.

File:

• trunk/includes/common/ajax.php (modified) (1 diff)

trunk/includes/common/ajax.php

@@ -22 +22 @@
  */
 function bbp_ajax_url() {
-    echo bbp_get_ajax_url();
+    echo esc_url( bbp_get_ajax_url() );
 }
     /**