Changeset 13844 for trunk/src/bp-blogs/bp-blogs-template.php

Timestamp:

05/02/2024 12:43:50 PM (12 months ago)

Author:

imath

Message:

Use a more appropriate function to escape slugs

Props johndawson155

See #9143 (trunk)
Closes ​https://github.com/buddypress/buddypress/pull/277

File:

• trunk/src/bp-blogs/bp-blogs-template.php (modified) (3 diffs)

trunk/src/bp-blogs/bp-blogs-template.php

@@ -18 +18 @@
  */
 function bp_blogs_slug() {
-    echo esc_url( bp_get_blogs_slug() );
+    echo esc_attr( bp_get_blogs_slug() );
 }
     /**
@@ -46 +46 @@
  */
 function bp_blogs_root_slug() {
-    echo esc_url( bp_get_blogs_root_slug() );
+    echo esc_attr( bp_get_blogs_root_slug() );
 }
     /**
@@ -1186 +1186 @@
                 // phpcs:ignore WordPress.Security.EscapeOutput
                 bp_get_form_field_attributes( 'blogname' ),
-                esc_url( bp_signup_get_subdomain_base() )
+                esc_attr( bp_signup_get_subdomain_base() )
             );
         }