wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857

git-svn-id: http://svn.automattic.com/wordpress/branches/2.0@3973 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2006-07-05 09:52:18 +00:00 · 2006-07-05 09:52:18 +00:00 · 006284f925
parent 5a066aafe6
commit 006284f925
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/functions.php
+++ b/wp-includes/functions.php
@ -2316,7 +2316,7 @@ function get_num_queries() {
 }

 function wp_nonce_url($actionurl, $action = -1) {
-	return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+	return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
 }

 function wp_nonce_field($action = -1) {