Changeset 11149 for trunk/src/bp-members/bp-members-template.php

Timestamp:

09/22/2016 12:16:30 AM (5 years ago)

Author:

r-a-y

Message:

Members: Escape various URL output functions.

Props espellcaste.

See #7132.

File:

• trunk/src/bp-members/bp-members-template.php (modified) (4 diffs)

trunk/src/bp-members/bp-members-template.php

@@ -830 +830 @@
  */
 function bp_member_permalink() {
-    echo bp_get_member_permalink();
+    echo esc_url( bp_get_member_permalink() );
 }
     /**
@@ -857 +857 @@
      * @since 1.2.0
      */
-    function bp_member_link() { echo bp_get_member_permalink(); }
+    function bp_member_link() { echo esc_url( bp_get_member_permalink() ); }
 
     /**
@@ -1758 +1758 @@
  */
 function bp_loggedin_user_link() {
-    echo bp_get_loggedin_user_link();
+    echo esc_url( bp_get_loggedin_user_link() );
 }
     /**
@@ -1785 +1785 @@
  */
 function bp_displayed_user_link() {
-    echo bp_get_displayed_user_link();
+    echo esc_url( bp_get_displayed_user_link() );
 }
     /**