peptiderepo 4b04b22161 fix: escape get_search_query() output to prevent XSS in search forms ...

Wrapped get_search_query() with esc_attr() in 404.php, front-page.php,
and searchform.php. Without this, a crafted search query can inject
arbitrary HTML attributes into the search input value field.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-12 16:22:48 +07:00

2.7 KiB

Raw Blame History

View Raw