From c2c282e9832c27494fe964cdcef18689151ed4b0 Mon Sep 17 00:00:00 2001
From: sixhours <calobee@gmail.com>
Date: Tue, 20 Nov 2012 10:37:37 -0500
Subject: [PATCH] Escape home_url() in #site-title link

We escape the URL when displaying custom-header.php and searchform.php, which leads me to believe it should also be escaped here.
---
 header.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/header.php b/header.php
index 55bd1631..dc16fc8b 100644
--- a/header.php
+++ b/header.php
@@ -47,7 +47,7 @@
 	<?php do_action( 'before' ); ?>
 	<header id="masthead" class="site-header" role="banner">
 		<hgroup>
-			<h1 class="site-title"><a href="<?php echo home_url( '/' ); ?>" title="<?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?>" rel="home"><?php bloginfo( 'name' ); ?></a></h1>
+			<h1 class="site-title"><a href="<?php echo esc_url( home_url( '/' ) ); ?>" title="<?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?>" rel="home"><?php bloginfo( 'name' ); ?></a></h1>
 			<h2 class="site-description"><?php bloginfo( 'description' ); ?></h2>
 		</hgroup>