magdev 6c8526d2a5 security: add |esc_url to all template URLs, register escape Twig filters (v1.1.3) ...

5th OWASP Top-10 pass: added |esc_url filter to all unescaped URL outputs
across 8 Twig template partials (headers, footers, search, comments).
Registered esc_html, esc_attr, esc_url as Twig filters with is_safe option.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 10:34:41 +01:00

1.6 KiB

Raw Permalink Blame History

View Raw