Changeset 16373

Timestamp:

11/14/2010 06:38:55 PM (14 years ago)

Author:

ryan

Message:

Some escaping

File:

• branches/3.0/wp-admin/plugins.php (modified) (2 diffs)

branches/3.0/wp-admin/plugins.php

@@ -256 +256 @@
                             if ( $plugin['is_uninstallable'] ) {
                                 /* translators: 1: plugin name, 2: plugin author */
-                                echo '<li>', sprintf( __( '<strong>%1$s</strong> by <em>%2$s</em> (will also <strong>delete its data</strong>)' ), $plugin['Name'], $plugin['Author'] ), '</li>';
+                                echo '<li>', sprintf( __( '<strong>%1$s</strong> by <em>%2$s</em> (will also <strong>delete its data</strong>)' ), esc_html($plugin['Name']), esc_html($plugin['Author']) ), '</li>';
                                 $data_to_delete = true;
                             } else {
                                 /* translators: 1: plugin name, 2: plugin author */
-                                echo '<li>', sprintf( __('<strong>%1$s</strong> by <em>%2$s</em>' ), $plugin['Name'], $plugin['Author'] ), '</li>';
+                                echo '<li>', sprintf( __('<strong>%1$s</strong> by <em>%2$s</em>' ), esc_html($plugin['Name']), esc_html($plugin['Author']) ), '</li>';
                             }
                         }
@@ -290 +290 @@
                     <?php
                         foreach ( (array)$files_to_delete as $file )
-                            echo '<li>' . str_replace(WP_PLUGIN_DIR, '', $file) . '</li>';
+                            echo '<li>' . esc_html(str_replace(WP_PLUGIN_DIR, '', $file)) . '</li>';
                     ?>
                     </ul>