Escape the return value of admin_url() with esc_url()

This commit is contained in:
Michael Fields 2013-02-06 20:43:42 -08:00
parent ce069e6d94
commit c0f3582777
1 changed files with 1 additions and 1 deletions

View File

@ -17,7 +17,7 @@
<div class="entry-content"> <div class="entry-content">
<?php if ( is_home() && current_user_can( 'publish_posts' ) ) : ?> <?php if ( is_home() && current_user_can( 'publish_posts' ) ) : ?>
<p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), admin_url( 'post-new.php' ) ); ?></p> <p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), esc_url( admin_url( 'post-new.php' ) ) ); ?></p>
<?php elseif ( is_search() ) : ?> <?php elseif ( is_search() ) : ?>