Changeset 5037 for trunk/includes/common/template-tags.php

Timestamp:

07/17/2013 07:35:03 PM (13 years ago)

Author:

johnjamesjacoby

Message:

For all template functions that output URL's, always echo an escaped value using esc_url(). See #2367.

File:

• trunk/includes/common/template-tags.php (modified) (3 diffs)

trunk/includes/common/template-tags.php

@@ -25 +25 @@
  */
 function bbp_forums_url( $path = '/' ) {
-    echo bbp_get_forums_url( $path );
+    echo esc_url( bbp_get_forums_url( $path ) );
 }
     /**
@@ -49 +49 @@
  */
 function bbp_topics_url( $path = '/' ) {
-    echo bbp_get_topics_url( $path );
+    echo esc_url( bbp_get_topics_url( $path ) );
 }
     /**
@@ -1945 +1945 @@
  */
 function bbp_view_url( $view = false ) {
-    echo bbp_get_view_url( $view );
+    echo esc_url( bbp_get_view_url( $view ) );
 }
     /**