Use esc_url instead of esc_attr for URLs. Improves security.

2024-08-27 13:02:56 +08:00
parent dcc18b8452
commit 57d25f9098
6 changed files with 10 additions and 10 deletions
@@ -6,7 +6,7 @@ if ( !defined( 'WPINC' ) ) {

 <div class="publisher">

-<a class="publisher-link" href="<?php echo esc_attr( get_author_posts_url($id) ) ?>">
+<a class="publisher-link" href="<?php echo esc_url( get_author_posts_url($id) ) ?>">
    <?php echo get_avatar( $id, 32 ) ?>
    <span><?php the_author() ?></span>
 </a>