Twenty Fifteen: escape variable in HTML attribute output in customer header. See #30133.
Built from https://develop.svn.wordpress.org/trunk@30044 git-svn-id: http://core.svn.wordpress.org/trunk@30044 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
aa78309255
commit
d583c5ecfc
|
@ -149,13 +149,13 @@ if ( ! function_exists( 'twentyfifteen_admin_header_image' ) ) :
|
|||
* @see twentyfifteen_custom_header_setup().
|
||||
*/
|
||||
function twentyfifteen_admin_header_image() {
|
||||
$style = sprintf( ' style="color:#%s;"', get_header_textcolor() );
|
||||
$style = sprintf( ' style="color: #%s;"', get_header_textcolor() );
|
||||
$color_scheme = twentyfifteen_get_color_scheme();
|
||||
$header_background_color = get_theme_mod( 'header_background_color', $color_scheme[1] );
|
||||
?>
|
||||
<div id="headimg" style="background-image: url(<?php header_image(); ?>); background-color: <?php echo esc_attr( $header_background_color ); ?>;">
|
||||
<h1 class="displaying-header-text"><a id="name"<?php echo $style; ?> onclick="return false;" href="<?php echo esc_url( home_url( '/' ) ); ?>"><?php bloginfo( 'name' ); ?></a></h1>
|
||||
<div id="desc" class="displaying-header-text"<?php echo $style; ?>><?php bloginfo( 'description' ); ?></div>
|
||||
<h1 class="displaying-header-text"><a id="name"<?php echo esc_attr( $style ); ?> onclick="return false;" href="<?php echo esc_url( home_url( '/' ) ); ?>"><?php bloginfo( 'name' ); ?></a></h1>
|
||||
<div id="desc" class="displaying-header-text"<?php echo esc_attr( $style ); ?>><?php bloginfo( 'description' ); ?></div>
|
||||
</div>
|
||||
<?php
|
||||
}
|
||||
|
|
|
@ -4,7 +4,7 @@
|
|||
*
|
||||
* @global string $wp_version
|
||||
*/
|
||||
$wp_version = '4.1-alpha-30043';
|
||||
$wp_version = '4.1-alpha-30044';
|
||||
|
||||
/**
|
||||
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.
|
||||
|
|
Loading…
Reference in New Issue