WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Consistent escaping in admin_color_scheme_picker(). Props johnjamesjacoby. fixes #22326 

git-svn-id: http://core.svn.wordpress.org/trunk@22375 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Ryan Boren 2012-11-05 18:16:23 +00:00
parent 3eabc7db5a
commit b10f343480
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wp-admin/includes/misc.php
View File

@ -537,16 +537,16 @@ $current_color = get_user_option('admin_color', $user_id);
if ( empty($current_color) ) if ( empty($current_color) )
$current_color = 'fresh'; $current_color = 'fresh';
foreach ( $_wp_admin_css_colors as $color => $color_info ): ?> foreach ( $_wp_admin_css_colors as $color => $color_info ): ?>
<div class="color-option"><input name="admin_color" id="admin_color_<?php echo $color; ?>" type="radio" value="<?php echo esc_attr($color) ?>" class="tog" <?php checked($color, $current_color); ?> /> <div class="color-option"><input name="admin_color" id="admin_color_<?php echo esc_attr( $color ); ?>" type="radio" value="<?php echo esc_attr( $color ); ?>" class="tog" <?php checked($color, $current_color); ?> />
<table class="color-palette"> <table class="color-palette">
<tr> <tr>
<?php foreach ( $color_info->colors as $html_color ): ?> <?php foreach ( $color_info->colors as $html_color ): ?>
<td style="background-color: <?php echo $html_color ?>" title="<?php echo $color ?>">&nbsp;</td> <td style="background-color: <?php echo esc_attr( $html_color ); ?>" title="<?php echo esc_attr( $color ); ?>">&nbsp;</td>
<?php endforeach; ?> <?php endforeach; ?>
</tr> </tr>
</table> </table>
<label for="admin_color_<?php echo $color; ?>"><?php echo $color_info->name ?></label> <label for="admin_color_<?php echo esc_attr( $color ); ?>"><?php echo esc_html( $color_info->name ); ?></label>
</div> </div>
<?php endforeach; ?> <?php endforeach; ?>
</fieldset> </fieldset>