[buddypress-trac] [BuddyPress Trac] #6952: Cover image inline CSS should use esc_url_raw() instead of esc_url() to escape attachment path.

[buddypress-trac]

#6952: Cover image inline CSS should use esc_url_raw() instead of esc_url() to
escape attachment path.
---------------------------+---------------------
 Reporter:  DJPaul         |       Owner:  djpaul
     Type:  defect (bug)   |      Status:  closed
 Priority:  normal         |   Milestone:  2.5.1
Component:  API - Avatars  |     Version:
 Severity:  normal         |  Resolution:  fixed
 Keywords:                 |
---------------------------+---------------------

Comment (by djpaul):

 In [changeset:"10644"]:
 {{{
 #!CommitTicketReference repository="" revision="10644"
 Attachments: when rendering inline CSS for cover images, use `esc_url_raw`
 to escape the image path.

 This prevents entities such as `&` being decoded into `&#038`, which can
 break image URLs that rely on querystring parameters for functionality.

 Fixes #6952 (2.5 branch)
 }}}

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6952#comment:3>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac