esc_url() for ()

git-svn-id: http://svn.automattic.com/wordpress/trunk@11724 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2009-07-20 01:41:05 +00:00
parent 3e73668bca
commit af409e2dae

View File

@ -820,29 +820,26 @@ function comments_template( $file = '/comments.php', $separate_comments = false
$req = get_option('require_name_email'); $req = get_option('require_name_email');
/** /**
* Raw comment author information fetched from the comment cookies. * Comment author information fetched from the comment cookies.
* *
* @uses wp_get_current_commenter() * @uses wp_get_current_commenter()
*/ */
$commenter = wp_get_current_commenter(); $commenter = wp_get_current_commenter();
/** /**
* The name of the current comment author escaped for use in attributes. Use * The name of the current comment author escaped for use in attributes.
* wp_get_current_commenter() to get the raw value.
*/ */
$comment_author = $commenter['comment_author']; $comment_author = $commenter['comment_author']; // Escaped by sanitize_comment_cookies()
/** /**
* The email address of the current comment author escaped for use in attributes. Use * The email address of the current comment author escaped for use in attributes.
* wp_get_current_commenter() to get the raw value.
*/ */
$comment_author_email = $commenter['comment_author_email']; $comment_author_email = $commenter['comment_author_email']; // Escaped by sanitize_comment_cookies()
/** /**
* The url of the current comment author escaped for use in attributes. Use * The url of the current comment author escaped for use in attributes.
* wp_get_current_commenter() to get the raw value.
*/ */
$comment_author_url = $commenter['comment_author_url']; $comment_author_url = esc_url($commenter['comment_author_url']);
/** @todo Use API instead of SELECTs. */ /** @todo Use API instead of SELECTs. */
if ( $user_ID) { if ( $user_ID) {