Some extra XSS protection. Redundant, but we should always escape late! see #11119
git-svn-id: http://svn.automattic.com/wordpress/trunk@12169 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
17ad540a6c
commit
2a77fc75cd
|
@ -582,7 +582,7 @@ var photostorage = false;
|
||||||
echo '<p>';
|
echo '<p>';
|
||||||
if ( $selection )
|
if ( $selection )
|
||||||
_e('via ');
|
_e('via ');
|
||||||
echo "<a href='$url'>$title</a>.</p>";
|
printf( "<a href='%s'>%s</a>.</p>", esc_url( $url ), esc_html( $title ) );
|
||||||
}
|
}
|
||||||
?></textarea>
|
?></textarea>
|
||||||
</div>
|
</div>
|
||||||
|
|
Loading…
Reference in New Issue