Changeset 9773 for branches/2.2/src/bp-blogs/bp-blogs-activity.php

Timestamp:

04/20/2015 04:08:00 PM (10 years ago)

Author:

johnjamesjacoby

Message:

All: make sure URLs are escaped (2.2 branch)

File:

• branches/2.2/src/bp-blogs/bp-blogs-activity.php (modified) (2 diffs)

branches/2.2/src/bp-blogs/bp-blogs-activity.php

@@ -175 +175 @@
 
     // Build the 'post link' part of the activity action string
-    $post_link  = '<a href="' . $post_url . '">' . $post_title . '</a>';
+    $post_link  = '<a href="' . esc_url( $post_url ) . '">' . $post_title . '</a>';
 
     $user_link = bp_core_get_userlink( $activity->user_id );
@@ -252 +252 @@
     }
 
-    $post_link = '<a href="' . $post_url . '">' . $post_title . '</a>';
+    $post_link = '<a href="' . esc_url( $post_url ) . '">' . $post_title . '</a>';
     $user_link = bp_core_get_userlink( $activity->user_id );