Changeset 13845 for branches/12.0/src/bp-blogs/bp-blogs-template.php

Timestamp:

05/02/2024 12:45:08 PM (2 years ago)

Author:

imath

Message:

Use a more appropriate function to escape slugs

Props johndawson155

Fixes #9143 (branch 12.0)

File:

• branches/12.0/src/bp-blogs/bp-blogs-template.php (modified) (3 diffs)

branches/12.0/src/bp-blogs/bp-blogs-template.php

@@ -18 +18 @@
  */
 function bp_blogs_slug() {
-        echo esc_url( bp_get_blogs_slug() );
+        echo esc_attr( bp_get_blogs_slug() );
 }
         /**
@@ -46 +46 @@
  */
 function bp_blogs_root_slug() {
-        echo esc_url( bp_get_blogs_root_slug() );
+        echo esc_attr( bp_get_blogs_root_slug() );
 }
         /**
@@ -1186 +1186 @@
                                 // phpcs:ignore WordPress.Security.EscapeOutput
                                 bp_get_form_field_attributes( 'blogname' ),
-                                esc_url( bp_signup_get_subdomain_base() )
+                                esc_attr( bp_signup_get_subdomain_base() )
                         );
                 }