Changeset 5037 for trunk/includes/search/template-tags.php

Timestamp:

07/17/2013 07:35:03 PM (12 years ago)

Author:

johnjamesjacoby

Message:

For all template functions that output URL's, always echo an escaped value using esc_url(). See #2367.

File:

• trunk/includes/search/template-tags.php (modified) (2 diffs)

trunk/includes/search/template-tags.php

@@ -247 +247 @@
  */
 function bbp_search_url() {
-    echo bbp_get_search_url();
+    echo esc_url( bbp_get_search_url() );
 }
     /**
@@ -285 +285 @@
  */
 function bbp_search_results_url() {
-    echo bbp_get_search_results_url();
+    echo esc_url( bbp_get_search_results_url() );
 }
     /**