Changeset 6819 for trunk/src/includes/forums/template.php

Timestamp:

05/14/2018 08:42:23 PM (8 years ago)

Author:

johnjamesjacoby

Message:

Prefer sanitize_html_class() over esc_attr().

This change uses the correct formatting function in places where potentially untrusted class strings are ran through array_map().

File:

• trunk/src/includes/forums/template.php (modified) (1 diff)

trunk/src/includes/forums/template.php

@@ -754 +754 @@
 
         // This could use bbp_get_forum_class() eventually...
-        $subforum_classes_attr = 'class="' . implode( ' ', array_map( 'esc_attr', $subforum_classes ) ) . '"';
+        $subforum_classes_attr = 'class="' . implode( ' ', array_map( 'sanitize_html_class', $subforum_classes ) ) . '"';
 
         // Build this sub forums link