WordPress.org

Make WordPress Core

Changeset 22520


Ignore:
Timestamp:
11/10/2012 05:30:51 AM (6 years ago)
Author:
nacin
Message:

URLs should be esc_url(), not esc_attr().

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/custom-header.php

    r22505 r22520  
    526526    }
    527527    ?></p>
    528     <form enctype="multipart/form-data" id="upload-form" class="wp-upload-form" method="post" action="<?php echo esc_attr( add_query_arg( 'step', 2 ) ) ?>">
     528    <form enctype="multipart/form-data" id="upload-form" class="wp-upload-form" method="post" action="<?php echo esc_url( add_query_arg( 'step', 2 ) ) ?>">
    529529    <p>
    530530        <label for="upload"><?php _e( 'Choose an image from your computer:' ); ?></label><br />
     
    555555</table>
    556556
    557 <form method="post" action="<?php echo esc_attr( add_query_arg( 'step', 1 ) ) ?>">
     557<form method="post" action="<?php echo esc_url( add_query_arg( 'step', 1 ) ) ?>">
    558558<table class="form-table">
    559559<tbody>
     
    730730<h2><?php _e( 'Crop Header Image' ); ?></h2>
    731731
    732 <form method="post" action="<?php echo esc_attr(add_query_arg('step', 3)); ?>">
     732<form method="post" action="<?php echo esc_url(add_query_arg('step', 3)); ?>">
    733733    <p class="hide-if-no-js"><?php _e('Choose the part of the image you want to use as your header.'); ?></p>
    734734    <p class="hide-if-js"><strong><?php _e( 'You need Javascript to choose a part of the image.'); ?></strong></p>
Note: See TracChangeset for help on using the changeset viewer.