WordPress.org

Make WordPress Core

Changeset 14633


Ignore:
Timestamp:
05/14/2010 03:03:59 PM (8 years ago)
Author:
nacin
Message:

esc_url the URL from get_upload_iframe_src. props jshreve, see #13383.

Location:
trunk/wp-admin/includes
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/includes/media.php

    r14618 r14633  
    380380
    381381function _media_button($title, $icon, $type) {
    382     return "<a href='" . get_upload_iframe_src($type) . "' id='add_$type' class='thickbox' title='$title'><img src='" . esc_url( admin_url( $icon ) ) . "' alt='$title' /></a>";
     382    return "<a href='" . esc_url( get_upload_iframe_src($type) ) . "' id='add_$type' class='thickbox' title='$title'><img src='" . esc_url( admin_url( $icon ) ) . "' alt='$title' /></a>";
    383383}
    384384
  • trunk/wp-admin/includes/post.php

    r14593 r14633  
    11441144    global $content_width, $_wp_additional_image_sizes;
    11451145
    1146     $set_thumbnail_link = '<p class="hide-if-no-js"><a title="' . esc_attr__( 'Set featured image' ) . '" href="' . get_upload_iframe_src('image') . '" id="set-post-thumbnail" class="thickbox">%s</a></p>';
     1146    $set_thumbnail_link = '<p class="hide-if-no-js"><a title="' . esc_attr__( 'Set featured image' ) . '" href="' . esc_url( get_upload_iframe_src('image') ) . '" id="set-post-thumbnail" class="thickbox">%s</a></p>';
    11471147    $content = sprintf($set_thumbnail_link, esc_html__( 'Set featured image' ));
    11481148
Note: See TracChangeset for help on using the changeset viewer.