Use proper escape function (#1576)

This commit is contained in:
Donna Peplinskie 2021-01-11 10:28:43 -05:00 committed by GitHub
parent f192fe85c9
commit 1ef384ce0d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -50,7 +50,7 @@ if ( ! function_exists( 'storefront_comment' ) ) {
<?php endif; ?>
<a href="<?php echo esc_url( htmlspecialchars( get_comment_link( $comment->comment_ID ) ) ); ?>" class="comment-date">
<?php echo '<time datetime="' . esc_html( get_comment_date( 'c' ) ) . '">' . esc_html( get_comment_date() ) . '</time>'; ?>
<?php echo '<time datetime="' . esc_attr( get_comment_date( 'c' ) ) . '">' . esc_html( get_comment_date() ) . '</time>'; ?>
</a>
</div>
<?php if ( 'div' !== $args['style'] ) : ?>