[wp-trac] [WordPress Trac] #43717: Ping back URL display with out escaping.

[WordPress Trac]

#43717: Ping back URL display with out escaping.
--------------------------+-----------------------------
 Reporter:  sharaz        |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Security      |    Version:  4.9.5
 Severity:  normal        |   Keywords:
  Focuses:  template      |
--------------------------+-----------------------------
 functions.php
 Line no 401 :   printf( '<link rel="pingback" href="%s">' . "\n",
 get_bloginfo( 'pingback_url' ) );
 According to theme review hand book
 [https://make.wordpress.org/themes/handbook/review/required/#code Ref]
 data should be escaped before output.
 So the right way.
 printf( '<link rel="pingback" href="%s">' . "\n", esc_url( get_bloginfo(
 'pingback_url' ) ) );

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43717>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform