diff -r 7b1b88e27a20 -r 48c4eec2b7e6 wp/wp-activate.php --- a/wp/wp-activate.php Thu Sep 29 08:06:27 2022 +0200 +++ b/wp/wp-activate.php Fri Sep 05 18:40:08 2025 +0200 @@ -87,7 +87,7 @@ */ function do_activate_header() { /** - * Fires before the Site Activation page is loaded. + * Fires within the `` section of the Site Activation page. * * Fires on the {@see 'wp_head'} action. * @@ -105,10 +105,11 @@ function wpmu_activate_stylesheet() { ?>
@@ -127,10 +128,10 @@

-
+

-
+

@@ -149,19 +150,19 @@ printf( /* translators: 1: Login URL, 2: Username, 3: User email address, 4: Lost password URL. */ __( 'Your account has been activated. You may now log in to the site using your chosen username of “%2$s”. Please check your email inbox at %3$s for your password and login instructions. If you do not receive an email, please check your junk or spam folder. If you still do not receive an email within an hour, you can reset your password.' ), - network_site_url( $blog_details->path . 'wp-login.php', 'login' ), - $signup->user_login, - $signup->user_email, - wp_lostpassword_url() + esc_url( network_site_url( $blog_details->path . 'wp-login.php', 'login' ) ), + esc_html( $signup->user_login ), + esc_html( $signup->user_email ), + esc_url( wp_lostpassword_url() ) ); } else { printf( /* translators: 1: Site URL, 2: Username, 3: User email address, 4: Lost password URL. */ __( 'Your site at %1$s is active. You may now log in to your site using your chosen username of “%2$s”. Please check your email inbox at %3$s for your password and login instructions. If you do not receive an email, please check your junk or spam folder. If you still do not receive an email within an hour, you can reset your password.' ), - sprintf( '%1$s%2$s', $signup->domain, $blog_details->path ), - $signup->user_login, - $signup->user_email, - wp_lostpassword_url() + sprintf( '%1$s', esc_url( $signup->domain . $blog_details->path ) ), + esc_html( $signup->user_login ), + esc_html( $signup->user_email ), + esc_url( wp_lostpassword_url() ) ); } echo '

'; @@ -169,18 +170,18 @@ ?>

-

get_error_message(); ?>

+

get_error_message() ); ?>

-

user_login; ?>

-

+

user_login ); ?>

+

View your site or Log in' ), $url, esc_url( $login_url ) ); + printf( __( 'Your account is now activated. View your site or Log in' ), esc_url( $url ), esc_url( $login_url ) ); ?>

@@ -201,8 +202,8 @@ printf( /* translators: 1: Login URL, 2: Network home URL. */ __( 'Your account is now activated. Log in or go back to the homepage.' ), - network_site_url( $blog_details->path . 'wp-login.php', 'login' ), - network_home_url( $blog_details->path ) + esc_url( network_site_url( $blog_details->path . 'wp-login.php', 'login' ) ), + esc_url( network_home_url( $blog_details->path ) ) ); ?>

@@ -213,9 +214,5 @@ ?>
-