diff --git src/wp-admin/includes/ajax-actions.php src/wp-admin/includes/ajax-actions.php
index f3d8e83..e3b345c 100644
|
|
|
function wp_ajax_send_attachment_to_editor() { |
| 2602 | 2602 | $rel = $rel ? ' rel="attachment wp-att-' . $id . '"' : ''; // Hard-coded string, $id is already sanitized |
| 2603 | 2603 | |
| 2604 | 2604 | if ( ! empty( $url ) ) { |
| 2605 | | $html = '<a href="' . esc_url( $url ) . '"' . $rel . '">' . $html . '</a>'; |
| | 2605 | $html = '<a href="' . esc_url( $url ) . '"' . $rel . '>' . $html . '</a>'; |
| 2606 | 2606 | } |
| 2607 | 2607 | } |
| 2608 | 2608 | |