Scott Taylor b35b167cfc Improve/update escaping in default widgets: ...

* wrap some variables in `esc_attr()` before echoing
* replace some `strip_tags()` calls with `sanitize_text_field()`
* call `esc_url()` when wrapping some URLs

Props welcher.
See #23012.

Built from https://develop.svn.wordpress.org/trunk@33814


git-svn-id: http://core.svn.wordpress.org/trunk@33782 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2015-08-30 05:38:21 +00:00

55 KiB

Raw Blame History

View Raw