From 8280a7ac9a00d9a083f5c82c8d61753a6173fd7f Mon Sep 17 00:00:00 2001 From: Sergey Biryukov Date: Mon, 4 Jul 2022 10:09:45 +0000 Subject: [PATCH] Coding Standards: Escape the home URL in the "Header updated. Visit your site" message. This affects `Custom_Image_Header::step_1()`. Follow-up to [12890], [45654]. Props jakariaistauk, rudlinkon, hztyfoon, costdev. Fixes #56132. git-svn-id: https://develop.svn.wordpress.org/trunk@53642 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-admin/includes/class-custom-image-header.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/wp-admin/includes/class-custom-image-header.php b/src/wp-admin/includes/class-custom-image-header.php index ffad8879bb..e59cd16284 100644 --- a/src/wp-admin/includes/class-custom-image-header.php +++ b/src/wp-admin/includes/class-custom-image-header.php @@ -521,7 +521,7 @@ class Custom_Image_Header {

Visit your site to see how it looks.' ), home_url( '/' ) ); + printf( __( 'Header updated. Visit your site to see how it looks.' ), esc_url( home_url( '/' ) ) ); ?>