sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Taxonomy: Escape feed_image argument in Walker_Category::start_el().

Browse Source 
See [11838] for the instance in `wp_list_authors()`.

Props abhijitrakas.
See #44880.

git-svn-id: https://develop.svn.wordpress.org/trunk@44413 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Sergey Biryukov 2019-01-07 12:47:38 +00:00
parent f46f7efaf4
commit d6b53ec840
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/wp-includes/class-walker-category.php
View File

@ -146,7 +146,7 @@ class Walker_Category extends Walker {
if ( empty( $args['feed_image'] ) ) {
$link .= $name;
} else {
$link .= "<img src='" . $args['feed_image'] . "'$alt" . ' />';
$link .= "<img src='" . esc_url( $args['feed_image'] ) . "'$alt" . ' />';
}
$link .= '</a>';