Ticket #4221: patch.diff

wp-includes/functions.php

@@ -1023 +1023 @@
         return $install_status;
 }
 
-function wp_nonce_url($actionurl, $action = -1) {
-        return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
+function wp_nonce_url($actionurl, $action = -1, $special_chars = true) {
+        $url = add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+        return ( $special_chars ) ? wp_specialchars( $url ) : $url;
 }
 
 function wp_nonce_field($action = -1, $name = "_wpnonce", $referer = true) {
@@ -1515 +1516 @@
         $submenu['themes.php'][7] = array( __( 'Widgets' ), 'edit_themes', 'widgets.php' );
 }