Changeset 6793 for trunk/src/includes/replies/functions.php

Timestamp:

04/04/2018 04:57:31 PM (8 years ago)

Author:

johnjamesjacoby

Message:

Feeds: use esc_url_raw() in topics & replies generator URLs.

This brings generator tag handling up to par with recent WordPress changes.

File:

• trunk/src/includes/replies/functions.php (modified) (1 diff)

trunk/src/includes/replies/functions.php

@@ -2092 +2092 @@
     <channel>
 
-        <title><?php echo $title; ?></title>
+        <title><?php echo $title; // Already escaped ?></title>
         <atom:link href="<?php self_link(); ?>" rel="self" type="application/rss+xml" />
         <link><?php self_link(); ?></link>
         <description><?php //?></description>
         <lastBuildDate><?php echo date( 'r' ); ?></lastBuildDate>
-        <generator>https://bbpress.org/?v=<?php bbp_version(); ?></generator>
+        <generator><?php echo esc_url_raw( 'https://bbpress.org/?v=' . convert_chars( bbp_get_version() ) ) ?></generator>
         <language><?php bloginfo_rss( 'language' ); ?></language>