WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Admin: Escape attachment name in case it contains special characters 

Merge of [37774] to the 4.4 branch.

Built from https://develop.svn.wordpress.org/branches/4.4@37785


git-svn-id: http://core.svn.wordpress.org/branches/4.4@37750 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Nikolay Bachiyski 2016-06-21 14:24:27 +00:00
parent 30bb01b2e4
commit e22ceae1b7
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/includes/class-wp-media-list-table.php
View File

@ -392,7 +392,7 @@ class WP_Media_List_Table extends WP_List_Table {
<span class="screen-reader-text"><?php _e( 'File name:' ); ?> </span> <span class="screen-reader-text"><?php _e( 'File name:' ); ?> </span>
<?php <?php
$file = get_attached_file( $post->ID ); $file = get_attached_file( $post->ID );
echo wp_basename( $file ); echo esc_html( wp_basename( $file ) );
?> ?>
</p> </p>
<?php <?php

2
wp-includes/post-template.php
View File

@ -1447,7 +1447,7 @@ function wp_get_attachment_link( $id = 0, $size = 'thumbnail', $permalink = fals
* @param bool $icon Whether to include an icon. Default false. * @param bool $icon Whether to include an icon. Default false.
* @param string|bool $text If string, will be link text. Default false. * @param string|bool $text If string, will be link text. Default false.
*/ */
return apply_filters( 'wp_get_attachment_link', "<a href='$url'>$link_text</a>", $id, $size, $permalink, $icon, $text ); return apply_filters( 'wp_get_attachment_link', "<a href='" . esc_url( $url ) . "'>$link_text</a>", $id, $size, $permalink, $icon, $text );
} }
/** /**