Changeset 9772 for trunk/src/bp-blogs/bp-blogs-activity.php

Timestamp:

04/20/2015 03:38:54 PM (9 years ago)

Author:

johnjamesjacoby

Message:

All: make sure URL variables are escaped (trunk)

File:

• trunk/src/bp-blogs/bp-blogs-activity.php (modified) (2 diffs)

trunk/src/bp-blogs/bp-blogs-activity.php

@@ -173 +173 @@
 
     // Build the 'post link' part of the activity action string
-    $post_link  = '<a href="' . $post_url . '">' . $post_title . '</a>';
+    $post_link  = '<a href="' . esc_url( $post_url ) . '">' . $post_title . '</a>';
 
     $user_link = bp_core_get_userlink( $activity->user_id );
@@ -250 +250 @@
     }
 
-    $post_link = '<a href="' . $post_url . '">' . $post_title . '</a>';
+    $post_link = '<a href="' . esc_url( $post_url ) . '">' . $post_title . '</a>';
     $user_link = bp_core_get_userlink( $activity->user_id );