Merge pull request #321 from BeAPI/fix/esacping-header-vars

fix (theme) : escaping header vars

Author: francoistibo

components/parts/common/header.php

@@ -5,8 +5,8 @@
 	<div class="header__inner">
 		<div class="container">
 			<a class="header__logo-link" href="<?php echo esc_url( home_url( '/' ) ); ?>">
-				<strong><?php echo esc_attr( get_bloginfo( 'name' ) ); ?></strong>
-				<span class="sr-only"><?php echo esc_attr( get_bloginfo( 'name' ) ); ?></span>
+				<strong><?php echo esc_html( get_bloginfo( 'name' ) ); ?></strong>
+				<span class="sr-only"><?php echo esc_html( get_bloginfo( 'name' ) ); ?></span>
 			</a>
 
 			<button class="header__menu-toggle" aria-expanded="false" aria-controls="menu">

header.php

@@ -31,4 +31,4 @@ function replaceHtmlClass(regexp, str) {
 	get_template_part( 'components/parts/common/skip-links' );
 	get_template_part( 'components/parts/common/header' );
 	?>
-	<main id="content" role="main" tabindex="-1" aria-label="<?php esc_html_e( 'Main content', 'beapi-frontend-framework' ); ?>">
+	<main id="content" role="main" tabindex="-1" aria-label="<?php esc_attr_e( 'Main content', 'beapi-frontend-framework' ); ?>">