sayontan / suffusion

The Suffusion Theme for WordPress
GNU General Public License v3.0
28 stars 18 forks source link

esc some code #21

Closed mbrsolution closed 2 years ago

mbrsolution commented 3 years ago

Hi Drake, how are you?

Is the following something that needs to be addressed for security purpose or not?

The following is found by the theme check plugin.

Found echo home_url in actions.php. home_url() must be escaped. Use esc_url() for link attributes. A manual review is needed.Line 903:

<form method="get" action="<?php echo home_url(); ?>/" class='search-info' id='search-info'>

The following is recommended <?php echo esc_url( home_url( '/' ) ); ?>

This is located in /wp-content/themes/suffusion/functions/actions.php

Documentation = https://codex.wordpress.org/Data_Validation#URLs

The above is one of a few similar issues that requires attention by the theme check plugin. I just thought of letting you know.

Thank you