Changeset 3653

Timestamp:

07/08/2016 03:11:06 PM (9 years ago)

Author:

jmdodd

Message:

Support: Use WordPress-native functions to improve escaping.

See #1544.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-bbp-codexify/wporg-bbp-codexify.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-bbp-codexify/wporg-bbp-codexify.php

@@ -51 +51 @@
     public static function convert_base_wiki_link( $matches ) {
         $matches[1] = preg_replace( '/[\s]+/', '', trim( $matches[1] ) );
-        return '<a href="' . self::BASE_URI . strtr( $matches[1], ' ', '_' ) . '">' . $matches[1] . '</a>';
+        return '<a href="' . esc_url( self::BASE_URI . strtr( $matches[1], ' ', '_' ) ) . '">' . esc_html( $matches[1] ) . '</a>';
     }
 
@@ -63 +63 @@
     public static function convert_vbar_wiki_link( $matches ) {
         $matches[1] = preg_replace( '/[\s]+/', '_', trim( $matches[1] ) );
-        return '<a href="' . self::BASE_URI . strtr( $matches[1], ' ', '_' ) . '">' . $matches[2] . '</a>';
+        return '<a href="' . esc_url( self::BASE_URI . strtr( $matches[1], ' ', '_' ) ) . '">' . esc_html( $matches[2] ) . '</a>';
     }
 } }