Changeset 10832 for trunk/wp-includes/script-loader.php

Timestamp:

03/24/2009 03:27:17 PM (17 years ago)

Author:

ryan

Message:

Validation fixes. Props Viper007Bond. fixes #9387

File:

• trunk/wp-includes/script-loader.php (modified) (2 diffs)

trunk/wp-includes/script-loader.php

@@ -610 +610 @@
         $ver = md5("$wp_scripts->concat_version");
         $src = $wp_scripts->base_url . "/wp-admin/load-scripts.php?c={$zip}&load=" . trim($wp_scripts->concat, ', ') . "&ver=$ver";
-        echo "<script type='text/javascript' src='$src'></script>\n";
+        echo "<script type='text/javascript' src='" . attribute_escape($src) . "'></script>\n";
     }
 
@@ -677 +677 @@
             $ver = md5("$wp_styles->concat_version{$dir}");
             $href = $wp_styles->base_url . "/wp-admin/load-styles.php?c={$zip}&dir={$dir}&load=" . trim($wp_styles->concat, ', ') . "&ver=$ver";
-            echo "<link rel='stylesheet' href='$href' type='text/css' media='all' />\n";
+            echo "<link rel='stylesheet' href='" . attribute_escape($href) . "' type='text/css' media='all' />\n";
         }