Use esc_url instead of esc_attr for URLs. Improves security.

2024-08-27 13:02:56 +08:00
parent dcc18b8452
commit 57d25f9098
6 changed files with 10 additions and 10 deletions
@@ -30,7 +30,7 @@ $default_image_location = get_theme_mod( 'minimalistflex_default_featured_images
                ?>
            <?php endif; ?>
            <div class="singular-image">
-                <img src="<?php echo esc_attr( $imgsrc ) ?>" aria-label="<?php esc_attr_e( 'The thumbnail image. This is a default image so that it\'s purely decorative.', 'minimalistflex' ) ?>">
+                <img src="<?php echo esc_url( $imgsrc ) ?>" aria-label="<?php esc_attr_e( 'The thumbnail image. This is a default image so that it\'s purely decorative.', 'minimalistflex' ) ?>">
            </div>
        <?php endif; ?>
        <div class="singular-main">