Changeset 11110 for trunk/wp-admin/update-core.php

Timestamp:

04/28/2009 06:37:51 AM (16 years ago)

Author:

ryan

Message:

attr escaping. see #9650

File:

• trunk/wp-admin/update-core.php (modified) (1 diff)

trunk/wp-admin/update-core.php

@@ -41 +41 @@
     wp_nonce_field('upgrade-core');
     echo '<p>';
-    echo '<input id="upgrade" class="button" type="submit" value="' . $submit . '" name="upgrade" />&nbsp;';
-    echo '<input name="version" value="'.$update->current.'" type="hidden"/>';
-    echo '<input name="locale" value="'.$update->locale.'" type="hidden"/>';
-    echo '<a href="' . $update->package . '" class="button">' . $download . '</a>&nbsp;';
+    echo '<input id="upgrade" class="button" type="submit" value="' . attr($submit) . '" name="upgrade" />&nbsp;';
+    echo '<input name="version" value="'. attr($update->current) .'" type="hidden"/>';
+    echo '<input name="locale" value="'. attr($update->locale) .'" type="hidden"/>';
+    echo '<a href="' . clean_url($update->package) . '" class="button">' . $download . '</a>&nbsp;';
     if ( 'en_US' != $update->locale )
         if ( !isset( $update->dismissed ) || !$update->dismissed )
-            echo '<input id="dismiss" class="button" type="submit" value="' . attr(__('Hide this update')) . '" name="dismiss" />';
+            echo '<input id="dismiss" class="button" type="submit" value="' . _a('Hide this update') . '" name="dismiss" />';
         else
-            echo '<input id="undismiss" class="button" type="submit" value="' . attr(__('Bring back this update')) . '" name="undismiss" />';
+            echo '<input id="undismiss" class="button" type="submit" value="' . _a('Bring back this update') . '" name="undismiss" />';
     echo '</p>';
     echo '</form>';