Twenty Ten: Escape get_author_posts_url() where appropriate in functions.php file.

audrasjb · audrasjb · commit 63d2516b62e3 · 2022-09-28T12:38:49.000Z
This changeset adds missing escaping to some instances of `get_author_posts_url()` used in Twenty Ten, as per WordPress Coding Standards. Props hztyfoon, robinwpdeveloper, mukesh27, rudlinkon, SergeyBiryukov, jakariaistauk. Fixes #56674. git-svn-id: https://develop.svn.wordpress.org/trunk@54344 602fd350-edb4-49c9-b593-d223f7449a82
diff --git a/src/wp-content/themes/twentyten/functions.php b/src/wp-content/themes/twentyten/functions.php
@@ -613,7 +613,7 @@ function twentyten_posted_on() {
 			),
 			sprintf(
 				'<span class="author vcard"><a class="url fn n" href="%1$s" title="%2$s">%3$s</a></span>',
-				get_author_posts_url( get_the_author_meta( 'ID' ) ),
+				esc_url( get_author_posts_url( get_the_author_meta( 'ID' ) ) ),
 				/* translators: %s: Author display name. */
 				esc_attr( sprintf( __( 'View all posts by %s', 'twentyten' ), get_the_author() ) ),
 				get_the_author()
diff --git a/src/wp-content/themes/twentyten/loop-attachment.php b/src/wp-content/themes/twentyten/loop-attachment.php
@@ -45,7 +45,7 @@
 								'meta-prep meta-prep-author',
 								sprintf(
 									'<span class="author vcard"><a class="url fn n" href="%1$s" title="%2$s" rel="author">%3$s</a></span>',
-									get_author_posts_url( get_the_author_meta( 'ID' ) ),
+									esc_url( get_author_posts_url( get_the_author_meta( 'ID' ) ) ),
 									/* translators: %s: Author display name. */
 									esc_attr( sprintf( __( 'View all posts by %s', 'twentyten' ), get_the_author() ) ),
 									get_the_author()
