From d583c5ecfc2a0d3fcbe786a340d81f700c7ffe1c Mon Sep 17 00:00:00 2001
From: Lance Willett <nanobar@gmail.com>
Date: Tue, 28 Oct 2014 16:25:18 +0000
Subject: [PATCH] Twenty Fifteen: escape variable in HTML attribute output in
 customer header. See #30133. Built from
 https://develop.svn.wordpress.org/trunk@30044

git-svn-id: http://core.svn.wordpress.org/trunk@30044 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-content/themes/twentyfifteen/inc/custom-header.php | 6 +++---
 wp-includes/version.php                               | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/wp-content/themes/twentyfifteen/inc/custom-header.php b/wp-content/themes/twentyfifteen/inc/custom-header.php
index bdcaef9c17..5cb92fe807 100644
--- a/wp-content/themes/twentyfifteen/inc/custom-header.php
+++ b/wp-content/themes/twentyfifteen/inc/custom-header.php
@@ -149,13 +149,13 @@ if ( ! function_exists( 'twentyfifteen_admin_header_image' ) ) :
  * @see twentyfifteen_custom_header_setup().
  */
 function twentyfifteen_admin_header_image() {
-	$style                   = sprintf( ' style="color:#%s;"', get_header_textcolor() );
+	$style                   = sprintf( ' style="color: #%s;"', get_header_textcolor() );
 	$color_scheme            = twentyfifteen_get_color_scheme();
 	$header_background_color = get_theme_mod( 'header_background_color', $color_scheme[1] );
 ?>
 	<div id="headimg" style="background-image: url(<?php header_image(); ?>); background-color: <?php echo esc_attr( $header_background_color ); ?>;">
-		<h1 class="displaying-header-text"><a id="name"<?php echo $style; ?> onclick="return false;" href="<?php echo esc_url( home_url( '/' ) ); ?>"><?php bloginfo( 'name' ); ?></a></h1>
-		<div id="desc" class="displaying-header-text"<?php echo $style; ?>><?php bloginfo( 'description' ); ?></div>
+		<h1 class="displaying-header-text"><a id="name"<?php echo esc_attr( $style ); ?> onclick="return false;" href="<?php echo esc_url( home_url( '/' ) ); ?>"><?php bloginfo( 'name' ); ?></a></h1>
+		<div id="desc" class="displaying-header-text"<?php echo esc_attr( $style ); ?>><?php bloginfo( 'description' ); ?></div>
 	</div>
 <?php
 }
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 20553c0ddb..2f45e3bc36 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.1-alpha-30043';
+$wp_version = '4.1-alpha-30044';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.