Changeset 12169 for trunk/wp-admin/press-this.php

Timestamp:

11/12/2009 02:37:28 AM (15 years ago)

Author:

markjaquith

Message:

Some extra XSS protection. Redundant, but we should always escape late! see #11119

File:

• trunk/wp-admin/press-this.php (modified) (1 diff)

trunk/wp-admin/press-this.php

@@ -583 +583 @@
                         if ( $selection )
                             _e('via ');
-                        echo "<a href='$url'>$title</a>.</p>";
+                        printf( "<a href='%s'>%s</a>.</p>", esc_url( $url ), esc_html( $title ) );
                     }
                 ?></textarea>