#4442 escaping added

ahmedkaludi · May 8, 2020 · f9ea6d5 · f9ea6d5
1 parent db53dc1
commit f9ea6d5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/components/components-core.php b/components/components-core.php
@@ -395,7 +395,7 @@ function ampforwp_sanitize_archive_desc(){
 			<?php do_action('ampforwp_before_head', $thisTemplate);  ?>
 			<?php do_action('ampforwp_last_head', $thisTemplate);  ?>
 		</head>
-		<body <?php echo $lightbox; ?> <?php ampforwp_body_class($bodyClass); ?>>
+		<body <?php echo esc_attr($lightbox); ?> <?php ampforwp_body_class($bodyClass); ?>>
 		<?php do_action('amp_start', $thisTemplate); ?>
 		<?php do_action('ampforwp_body_beginning', $thisTemplate);  
 }