{"comment":{"url":"https://api.github.com/repos/meredevelopment/shopp/comments/9822922","html_url":"https://github.com/meredevelopment/shopp/commit/d4517863e9dcb3707fd9dc2d847b8f1563f68054#commitcomment-9822922","id":9822922,"user":{"login":"jonathandavis","id":2429309,"avatar_url":"https://avatars.githubusercontent.com/u/2429309?v=3","gravatar_id":"","url":"https://api.github.com/users/jonathandavis","html_url":"https://github.com/jonathandavis","followers_url":"https://api.github.com/users/jonathandavis/followers","following_url":"https://api.github.com/users/jonathandavis/following{/other_user}","gists_url":"https://api.github.com/users/jonathandavis/gists{/gist_id}","starred_url":"https://api.github.com/users/jonathandavis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonathandavis/subscriptions","organizations_url":"https://api.github.com/users/jonathandavis/orgs","repos_url":"https://api.github.com/users/jonathandavis/repos","events_url":"https://api.github.com/users/jonathandavis/events{/privacy}","received_events_url":"https://api.github.com/users/jonathandavis/received_events","type":"User","site_admin":false},"position":15,"line":1007,"path":"api/theme/storefront.php","commit_id":"d4517863e9dcb3707fd9dc2d847b8f1563f68054","created_at":"2015-02-19T15:21:02Z","updated_at":"2015-02-19T15:21:02Z","body":"Let's ensure we escape that parameter and clean up the concatenation formatting by spacing it out (when in doubt, space it out). There is a lot of old code that did not follow any written standard. This is one of those crufty bits.\r\n\r\n`$_[] = '<select name=\"sort\" class=\"shopp-orderby-menu ' . esc_attr($class) . '\">';`"}}