10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 18:56:10 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed XSS issue with current profile URL

Browse Source
This commit is contained in:
nikitasinelnikov
2021-05-07 13:42:20 +03:00
parent 8e2adccba9
commit 60187cdc67
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-permalinks.php
+4 -4
View File
@@ -88,14 +88,14 @@ if ( ! class_exists( 'um\core\Permalinks' ) ) {
if ( !$id = $wp_the_query->get_queried_object_id() )
return;
if( UM()->config()->permalinks['user'] == $id ) {
$link = $this->get_current_url();
if ( UM()->config()->permalinks['user'] == $id ) {
$link = esc_url( $this->get_current_url() );
echo "<link rel='canonical' href='$link' />\n";
return;
}
$link = get_permalink( $id );
if ( $page = get_query_var('cpage') ){
if ( $page = get_query_var( 'cpage' ) ){
$link = get_comments_pagenum_link( $page );
echo "<link rel='canonical' href='$link' />\n";
}
@@ -303,7 +303,7 @@ if ( ! class_exists( 'um\core\Permalinks' ) ) {
* @return string
*/
function add_query( $key, $value ) {
$this->current_url = add_query_arg( $key, $value, $this->get_current_url() );
$this->current_url = add_query_arg( $key, $value, $this->get_current_url() );
return $this->current_url;
}