WordPress.org
Get WordPress

Make WordPress Core


Ignore:
Timestamp:
05/02/2010 10:53:59 PM (15 years ago)
Author:
ryan
Message:

Escape links by default. Props alexkingorg. see #13051

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/wp-admin/ms-edit.php

    r14313 r14347  
    3030
    3131        if ( empty( $_POST ) )
    32             wp_die( sprintf( __( 'You probably need to go back to the <a href="%s">options page</a>.', esc_url( admin_url( 'ms-options.php' ) ) ) ) );
     32            wp_die( sprintf( __( 'You probably need to go back to the <a href="%s">options page</a>.', admin_url( 'ms-options.php' ) ) ) );
    3333
    3434        if ( isset($_POST['WPLANG']) && ( '' === $_POST['WPLANG'] || in_array( $_POST['WPLANG'], get_available_languages() ) ) )
    … …  
    205205
    206206        if ( empty( $_POST ) )
    207             wp_die( sprintf( __( 'You probably need to go back to the <a href="%s">sites page</a>', esc_url( admin_url( 'ms-sites.php' ) ) ) ) );
     207            wp_die( sprintf( __( 'You probably need to go back to the <a href="%s">sites page</a>', admin_url( 'ms-sites.php' ) ) ) );
    208208
    209209        switch_to_blog( $id );
    … …  
    467467            </head>
    468468            <body id="error-page">
    469                 <h1 id="logo"><img alt="WordPress" src="<?php echo esc_attr( admin_url( 'images/wordpress-logo.png' ) ); ?>" /></h1>
     469                <h1 id="logo"><img alt="WordPress" src="<?php echo admin_url( 'images/wordpress-logo.png' ); ?>" /></h1>
    470470                <form action="ms-edit.php?action=<?php echo esc_attr( $_GET['action2'] ) ?>" method="post">
    471471                    <input type="hidden" name="action" value="<?php echo esc_attr( $_GET['action2'] ) ?>" />
Note: See TracChangeset for help on using the changeset viewer.