WordPress.org

Make WordPress Core

Changeset 10610


Ignore:
Timestamp:
02/20/09 21:36:09 (5 years ago)
Author:
ryan
Message:

Add some escaping

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.7/wp-admin/import/mt.php

    r10429 r10610  
    4040 
    4141<?php wp_import_upload_form( add_query_arg('step', 1) ); ?> 
    42 <form method="post" action="<?php echo add_query_arg('step', 1); ?>" class="import-upload-form"> 
     42<form method="post" action="<?php echo attribute_escape(add_query_arg('step', 1)); ?>" class="import-upload-form"> 
    4343 
    4444<?php wp_nonce_field('import-upload'); ?> 
Note: See TracChangeset for help on using the changeset viewer.