@@ -4,6 +4,7 @@
#### Tweaks
+ * Switched to the new WordPress escaping API
* Rewritten TarskiOptions object deserialisation
* Added `get_raw_tarski_option` function
* Alternate stylesheet listing degrades gracefully when no styles are present
CHANGELOG
@@ -29,7 +29,7 @@ if (count($styles) > 0) { ?>
<?php if (detectWPMU()) { // WPMU users ?>
<p><?php _e('Tarski allows you to select an alternate style that modifies the default one. Choose from the list above.','tarski'); ?></p>
<?php } else { // non-WPMU users ?>
- <p><?php printf( __('Tarski allows you to select an %1$s that modifies the default one. Choose from the list above, or upload your own to %2$s.','tarski'), '<a href="http://tarskitheme.com/help/styles/">'. __('alternate style','tarski'). '</a>', '<kbd>wp-content/themes/' . get_template() . '/styles/</kbd>' ); ?></p>
+ <p><?php printf( __('Tarski allows you to select an %1$s that modifies the default one. Choose from the list above, or upload your own to %2$s.', 'tarski'), '<a href="http://tarskitheme.com/help/styles/">' . __('alternate style', 'tarski') . '</a>', '<kbd>wp-content/themes/' . get_template() . '/styles/</kbd>' ); ?></p>
<?php } ?>
<?php if (count($styles) < 1) { ?>
app/templates/options/alternate_style.php
@@ -33,7 +33,7 @@ class TarskiAsset {
$meta = array("<meta name=\"wp_theme\" content=\"Tarski $themeversion\" />");
global $wp_query;
- $excerpt = ($wp_query->post) ? trim(strip_tags(wp_specialchars($wp_query->post->post_excerpt))) : '';
+ $excerpt = ($wp_query->post) ? trim(strip_tags(esc_attr($wp_query->post->post_excerpt))) : '';
if ((is_single() || is_page()) && strlen($excerpt))
$description = $excerpt;
library/classes/asset.php
@@ -190,7 +190,7 @@ class TarskiVersion {
*/
function latest_version_number() {
if(preg_match('/<entry>.*?<title>(.+?)<\/title>.*?<\/entry>/is', $this->feed_data, $matches)) {
- $this->latest = wp_specialchars($matches[1]);
+ $this->latest = esc_html($matches[1]);
}
}
@@ -205,7 +205,7 @@ class TarskiVersion {
*/
function latest_version_link() {
if(preg_match('/<entry>.*?<id>(.+?)<\/id>.*?<\/entry>/is', $this->feed_data, $matches)) {
- $this->latest_link = wp_specialchars($matches[1]);
+ $this->latest_link = esc_html($matches[1]);
}
}
library/classes/version.php
@@ -14,7 +14,7 @@ function tarski_author_posts_link() {
get_author_posts_url($authordata->ID, $authordata->user_nicename),
sprintf(
__('Articles by %s','tarski'),
- attribute_escape(get_the_author())
+ esc_attr(get_the_author())
),
get_the_author()
);
library/helpers/author_helper.php
@@ -36,7 +36,7 @@ function tarski_doctitle($sep = '·') {
elseif ((get_option('show_on_front') == 'posts') && is_home())
$content = get_bloginfo('description', 'display');
elseif (is_search())
- $content = sprintf(__('Search results for %s', 'tarski'), attribute_escape(get_search_query()));
+ $content = sprintf(__('Search results for %s', 'tarski'), esc_html(get_search_query()));
elseif (is_month())
$content = single_month_title(' ', false);
elseif (is_tag())
library/helpers/template_helper.php
@@ -11,7 +11,7 @@
<h1 class="title"><?php _e('Search Results','tarski'); ?></h1>
</div>
<div class="content">
- <p><?php printf( __('Your search for %s returned the following results.','tarski'), '<strong>' . attribute_escape(get_search_query()) . '</strong>' ); ?></p>
+ <p><?php printf( __('Your search for %s returned the following results.','tarski'), '<strong>' . esc_html(get_search_query()) . '</strong>' ); ?></p>
</div>
</div> <!-- /archive -->
@@ -26,7 +26,7 @@
<h1 class="title"><?php _e('No results','tarski'); ?></h1>
</div>
<div class="content">
- <p><?php printf( __('Your search for %1$s returned no results. Try returning to the %2$s.','tarski'), '<strong>' . attribute_escape(get_search_query()) . '</strong>', '<a href="' . get_bloginfo('url') . '">' . __('front page','tarski') . '</a>' ); ?></p>
+ <p><?php printf( __('Your search for %1$s returned no results. Try returning to the %2$s.','tarski'), '<strong>' . esc_html(get_search_query()) . '</strong>', '<a href="' . get_bloginfo('url') . '">' . __('front page','tarski') . '</a>' ); ?></p>
</div>
</div> <!-- /entry -->
search.php
155e9bbeb9287a0488e36cdb8dadd8d310543620
Benedict Eastaugh
benedict@eastaugh.net
http://github.com/ionfish/tarski/commit/2bee5cdad4a3275add6aef087c12b085f8ff95d6
2bee5cdad4a3275add6aef087c12b085f8ff95d6
2009-10-04T13:26:12-07:00
2009-10-04T13:26:12-07:00
Replace various uses of wp_specialchars and attribute_escape with the new escaping functions, esc_attr and esc_html.
34aea2def39b2d34fa82980294c8f2e3cf987a01
Benedict Eastaugh
benedict@eastaugh.net