escape more things #WWGJD

This commit is contained in:
Robin Cornett
2015-05-07 20:36:35 -04:00
parent 9f97e65e88
commit 9bdca7944f
6 changed files with 16 additions and 9 deletions
@@ -113,7 +113,10 @@ class Display_Featured_Image_Genesis_Admin {
$id
);
echo '<img src="' . esc_url( $preview[0] ) . '" alt="' . esc_attr( $alt ) . '" />';
printf( '<img src="%1$s" alt="%2$s" />',
esc_url( $preview[0] ),
esc_attr( $alt )
);
}
@@ -141,7 +144,10 @@ class Display_Featured_Image_Genesis_Admin {
wp_get_attachment_image_src( $id, 'thumbnail' ),
$id
);
echo '<img src="' . esc_url( $preview[0] ) . '" alt="' . esc_attr( the_title_attribute( 'echo=0' ) ) . '" />';
printf( '<img src="%1$s" alt="%2$s" />',
esc_url( $preview[0] ),
esc_attr( the_title_attribute( 'echo=0' ) )
);
}