Escape the return value of get_author_posts_url() with esc_url().

This commit is contained in:
Michael Fields 2013-02-06 20:48:04 -08:00
parent c0f3582777
commit 9f58e3f6e2
1 changed files with 1 additions and 1 deletions

View File

@ -29,7 +29,7 @@ get_header(); ?>
* what author we're dealing with (if that is the case).
*/
the_post();
printf( __( 'Author Archives: %s', '_s' ), '<span class="vcard"><a class="url fn n" href="' . get_author_posts_url( get_the_author_meta( "ID" ) ) . '" title="' . esc_attr( get_the_author() ) . '" rel="me">' . get_the_author() . '</a></span>' );
printf( __( 'Author Archives: %s', '_s' ), '<span class="vcard"><a class="url fn n" href="' . esc_url( get_author_posts_url( get_the_author_meta( "ID" ) ) ) . '" title="' . esc_attr( get_the_author() ) . '" rel="me">' . get_the_author() . '</a></span>' );
/* Since we called the_post() above, we need to
* rewind the loop back to the beginning that way
* we can run the loop properly, in full.