Changeset 10892

Timestamp:

06/22/2016 03:40:45 PM (8 years ago)

Author:

imath

Message:

Improve escaping in cover-image-header.php template.

Fixes #7136

File:

• trunk/src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php (modified) (1 diff)

trunk/src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php

@@ -15 +15 @@
 
 <div id="cover-image-container">
-    <a id="header-cover-image" href="<?php bp_group_permalink(); ?>"></a>
+    <a id="header-cover-image" href="<?php echo esc_url( bp_get_group_permalink() ); ?>"></a>
 
     <div id="item-header-cover-image">
         <?php if ( ! bp_disable_group_avatar_uploads() ) : ?>
             <div id="item-header-avatar">
-                <a href="<?php bp_group_permalink(); ?>" title="<?php bp_group_name(); ?>">
+                <a href="<?php echo esc_url( bp_get_group_permalink() ); ?>" title="<?php echo esc_attr( bp_get_group_name() ); ?>">
 
                     <?php bp_group_avatar(); ?>