WordPress.org

Make WordPress Core


Ignore:
Timestamp:
12/21/2010 05:17:58 PM (9 years ago)
Author:
ryan
Message:

Translations in title attributes require esc_attr().

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/includes/class-wp-users-list-table.php

    r17024 r17102  
    281281                    break;
    282282                case 'email':
    283                     $r .= "<td $attributes><a href='mailto:$email' title='" . sprintf( __( 'E-mail: %s' ), $email ) . "'>$email</a></td>";
     283                    $r .= "<td $attributes><a href='mailto:$email' title='" . esc_attr( sprintf( __( 'E-mail: %s' ), $email ) ) . "'>$email</a></td>";
    284284                    break;
    285285                case 'role':
     
    290290                    $r .= "<td $attributes>";
    291291                    if ( $numposts > 0 ) {
    292                         $r .= "<a href='edit.php?author=$user_object->ID' title='" . __( 'View posts by this author' ) . "' class='edit'>";
     292                        $r .= "<a href='edit.php?author=$user_object->ID' title='" . esc_attr__( 'View posts by this author' ) . "' class='edit'>";
    293293                        $r .= $numposts;
    294294                        $r .= '</a>';
Note: See TracChangeset for help on using the changeset viewer.