Changeset 18018 for branches/3.1/wp-admin/includes/media.php

Timestamp:

05/24/2011 03:53:22 PM (14 years ago)

Author:

ryan

Message:

Sanitize guid on save and display. Sanitize mime type on save. Don't allow changing mime type via edit form handlers. Protect hidden meta.

Location:

branches/3.1

Files:

• . (modified) (1 prop)
• wp-admin/includes/media.php (modified) (1 diff)

branches/3.1/wp-admin/includes/media.php

@@ -1193 +1193 @@
     $toggle_off = __( 'Hide' );
 
-    $filename = basename( $post->guid );
+    $filename = esc_html( basename( $post->guid ) );
     $title = esc_attr( $post->post_title );