HostForge-Systems/wordpress
Template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Coding Standards: Escape thumbnail URL and attributes in wp_image_editor().

Browse Source 
Follow-up to [11965].

Props benazeer, dhruvang21, sabernhardt.
Fixes #62951.
Built from https://develop.svn.wordpress.org/trunk@59990


git-svn-id: http://core.svn.wordpress.org/trunk@59332 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Sergey Biryukov
2025-03-16 20:47:29 +00:00
parent 10facebdbc
commit e032455914
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/includes/image-edit.php
View File

@@ -293,7 +293,7 @@ function wp_image_editor( $post_id, $msg = false ) {
</div> </div>
<div class="imgedit-thumbnail-preview-group"> <div class="imgedit-thumbnail-preview-group">
<figure class="imgedit-thumbnail-preview"> <figure class="imgedit-thumbnail-preview">
<img src="<?php echo $thumb['url']; ?>" width="<?php echo $thumb_img[0]; ?>" height="<?php echo $thumb_img[1]; ?>" class="imgedit-size-preview" alt="" draggable="false" /> <img src="<?php echo esc_url( $thumb['url'] ); ?>" width="<?php echo esc_attr( $thumb_img[0] ); ?>" height="<?php echo esc_attr( $thumb_img[1] ); ?>" class="imgedit-size-preview" alt="" draggable="false" />
<figcaption class="imgedit-thumbnail-preview-caption"><?php _e( 'Current thumbnail' ); ?></figcaption> <figcaption class="imgedit-thumbnail-preview-caption"><?php _e( 'Current thumbnail' ); ?></figcaption>
</figure> </figure>
<div id="imgedit-save-target-<?php echo $post_id; ?>" class="imgedit-save-target"> <div id="imgedit-save-target-<?php echo $post_id; ?>" class="imgedit-save-target">

2
wp-includes/version.php
View File

@@ -16,7 +16,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '6.8-beta2-59989'; $wp_version = '6.8-beta2-59990';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.