Skip to:
Content

BuddyPress.org


Ignore:
Timestamp:
06/22/2016 03:40:45 PM (3 years ago)
Author:
imath
Message:

Improve escaping in cover-image-header.php template.

Fixes #7136

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/bp-templates/bp-legacy/buddypress/groups/single/cover-image-header.php

    r10732 r10892  
    1515
    1616<div id="cover-image-container">
    17     <a id="header-cover-image" href="<?php bp_group_permalink(); ?>"></a>
     17    <a id="header-cover-image" href="<?php echo esc_url( bp_get_group_permalink() ); ?>"></a>
    1818
    1919    <div id="item-header-cover-image">
    2020        <?php if ( ! bp_disable_group_avatar_uploads() ) : ?>
    2121            <div id="item-header-avatar">
    22                 <a href="<?php bp_group_permalink(); ?>" title="<?php bp_group_name(); ?>">
     22                <a href="<?php echo esc_url( bp_get_group_permalink() ); ?>" title="<?php echo esc_attr( bp_get_group_name() ); ?>">
    2323
    2424                    <?php bp_group_avatar(); ?>
Note: See TracChangeset for help on using the changeset viewer.