Changeset 11173 for trunk/wp-admin/theme-editor.php

Timestamp:

05/04/2009 05:54:08 PM (17 years ago)

Author:

ryan

Message:

Attr escaping

File:

• trunk/wp-admin/theme-editor.php (modified) (1 diff)

trunk/wp-admin/theme-editor.php

@@ -97 +97 @@
                         $docs_select .= '<option value="">' . _a( 'Function Name...' ) . '</option>';
                         foreach ( $functions as $function ) {
-                                $docs_select .= '<option value="' . urlencode( $function ) . '">' . htmlspecialchars( $function ) . '()</option>';
+                                $docs_select .= '<option value="' . attr( urlencode( $function ) ) . '">' . htmlspecialchars( $function ) . '()</option>';
                         }
                         $docs_select .= '</select>';