WordPress.org

Make WordPress Core

Changeset 22520


Ignore:
Timestamp:
11/10/12 05:30:51 (17 months ago)
Author:
nacin
Message:

URLs should be esc_url(), not esc_attr().

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/custom-header.php

    r22505 r22520  
    526526    } 
    527527    ?></p> 
    528     <form enctype="multipart/form-data" id="upload-form" class="wp-upload-form" method="post" action="<?php echo esc_attr( add_query_arg( 'step', 2 ) ) ?>"> 
     528    <form enctype="multipart/form-data" id="upload-form" class="wp-upload-form" method="post" action="<?php echo esc_url( add_query_arg( 'step', 2 ) ) ?>"> 
    529529    <p> 
    530530        <label for="upload"><?php _e( 'Choose an image from your computer:' ); ?></label><br /> 
     
    555555</table> 
    556556 
    557 <form method="post" action="<?php echo esc_attr( add_query_arg( 'step', 1 ) ) ?>"> 
     557<form method="post" action="<?php echo esc_url( add_query_arg( 'step', 1 ) ) ?>"> 
    558558<table class="form-table"> 
    559559<tbody> 
     
    730730<h2><?php _e( 'Crop Header Image' ); ?></h2> 
    731731 
    732 <form method="post" action="<?php echo esc_attr(add_query_arg('step', 3)); ?>"> 
     732<form method="post" action="<?php echo esc_url(add_query_arg('step', 3)); ?>"> 
    733733    <p class="hide-if-no-js"><?php _e('Choose the part of the image you want to use as your header.'); ?></p> 
    734734    <p class="hide-if-js"><strong><?php _e( 'You need Javascript to choose a part of the image.'); ?></strong></p> 
Note: See TracChangeset for help on using the changeset viewer.