Changeset 5037 for trunk/includes/replies/template-tags.php

Timestamp:

07/17/2013 07:35:03 PM (11 years ago)

Author:

johnjamesjacoby

Message:

For all template functions that output URL's, always echo an escaped value using esc_url(). See #2367.

File:

• trunk/includes/replies/template-tags.php (modified) (4 diffs)

trunk/includes/replies/template-tags.php

@@ -367 +367 @@
  */
 function bbp_reply_permalink( $reply_id = 0 ) {
-    echo bbp_get_reply_permalink( $reply_id );
+    echo esc_url( bbp_get_reply_permalink( $reply_id ) );
 }
     /**
@@ -395 +395 @@
  */
 function bbp_reply_url( $reply_id = 0 ) {
-    echo bbp_get_reply_url( $reply_id );
+    echo esc_url( bbp_get_reply_url( $reply_id ) );
 }
     /**
@@ -1181 +1181 @@
  */
 function bbp_reply_author_url( $reply_id = 0 ) {
-    echo bbp_get_reply_author_url( $reply_id );
+    echo esc_url( bbp_get_reply_author_url( $reply_id ) );
 }
     /**
@@ -1852 +1852 @@
  */
 function bbp_reply_edit_url( $reply_id = 0 ) {
-    echo bbp_get_reply_edit_url( $reply_id );
+    echo esc_url( bbp_get_reply_edit_url( $reply_id ) );
 }
     /**