wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857

git-svn-id: http://svn.automattic.com/wordpress/trunk@3974 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2006-07-05 09:55:24 +00:00
parent 7c57caf5e8
commit d95038025d
1 changed files with 1 additions and 1 deletions

View File

@ -806,7 +806,7 @@ function is_blog_installed() {
} }
function wp_nonce_url($actionurl, $action = -1) { function wp_nonce_url($actionurl, $action = -1) {
return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl); return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
} }
function wp_nonce_field($action = -1) { function wp_nonce_field($action = -1) {