[wp-trac] [WordPress Trac] #30212: Twenty Fifteen: Proper Escaping Missing From HTML5 Shiv Header Call

WordPress Trac noreply at wordpress.org
Fri Oct 31 11:05:02 UTC 2014


#30212: Twenty Fifteen: Proper Escaping Missing From HTML5 Shiv Header Call
-------------------------------+-----------------------------
 Reporter:  philiparthurmoore  |      Owner:
     Type:  defect (bug)       |     Status:  new
 Priority:  normal             |  Milestone:  Awaiting Review
Component:  Bundled Theme      |    Version:  trunk
 Severity:  normal             |   Keywords:
  Focuses:                     |
-------------------------------+-----------------------------
 This:

 {{{
         <!--[if lt IE 9]>
         <script src="<?php echo get_template_directory_uri();
 ?>/js/html5.js"></script>
         <![endif]-->
 }}}

 Should be this:

 {{{
         <!--[if lt IE 9]>
         <script src="<?php echo esc_url( get_template_directory_uri() );
 ?>/js/html5.js"></script>
         <![endif]-->
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30212>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list