Changeset 11929 for trunk/wp-admin/includes/template.php

Timestamp:

09/14/2009 01:57:48 PM (17 years ago)

Author:

ryan

Message:

Filter fields through kses upon display. Introduce sanitize_user_object() and sanitize_user_field(). see #10751

File:

• trunk/wp-admin/includes/template.php (modified) (1 diff)

trunk/wp-admin/includes/template.php

@@ -1893 +1893 @@
     if ( !( is_object( $user_object) && is_a( $user_object, 'WP_User' ) ) )
         $user_object = new WP_User( (int) $user_object );
+    $user_object = sanitize_user_object($user_object, 'display');
     $email = $user_object->user_email;
     $url = $user_object->user_url;