Coding Standards: Add missing escaping function in Custom_Image_Header::show_header_selector().

Props chintan1896, SergeyBiryukov.
Fixes #57638.


git-svn-id: https://develop.svn.wordpress.org/trunk@55240 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Jb Audras 2023-02-06 21:34:56 +00:00
parent 9f772e8805
commit d69b60e7ca

View File

@ -332,7 +332,7 @@ class Custom_Image_Header {
if ( ! empty( $header['attachment_id'] ) ) {
$width = ' width="230"';
}
echo '<img src="' . set_url_scheme( $header_thumbnail ) . '" alt="' . esc_attr( $header_alt_text ) . '"' . $width . ' /></label>';
echo '<img src="' . esc_url( set_url_scheme( $header_thumbnail ) ) . '" alt="' . esc_attr( $header_alt_text ) . '"' . $width . ' /></label>';
echo '</div>';
}