Use esc_url instead of esc_attr for URLs. Improves security.

2024-08-27 13:02:56 +08:00
parent dcc18b8452
commit 57d25f9098
6 changed files with 10 additions and 10 deletions
@@ -68,7 +68,7 @@ $default_image_location = get_theme_mod( 'minimalistflex_default_featured_images
            </div>
            <div class="panel-meta">
                <?php if ( get_theme_mod( 'minimalistflex_interface_publisher', 'yes' ) == 'yes' ): ?>
-                    <a class="panel-author" href="<?php echo esc_attr( get_author_posts_url($id) ) ?>">
+                    <a class="panel-author" href="<?php echo esc_url( get_author_posts_url($id) ) ?>">
                        <span aria-hidden="true"><?php echo get_avatar( $id, 80 ) ?></span>
                        <?php the_author() ?>
                    </a>