Changeset 23563 for trunk/wp-admin/includes/class-wp-comments-list-table.php

Timestamp:

03/01/2013 05:00:25 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #21767

File:

• trunk/wp-admin/includes/class-wp-comments-list-table.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-comments-list-table.php

@@ -171 +171 @@
             // I toyed with this, but decided against it. Leaving it in here in case anyone thinks it is a good idea. ~ Mark
             if ( !empty( $_REQUEST['s'] ) )
-                $link = add_query_arg( 's', esc_attr( stripslashes( $_REQUEST['s'] ) ), $link );
+                $link = add_query_arg( 's', esc_attr( wp_unslash( $_REQUEST['s'] ) ), $link );
             */
             $status_links[$status] = "<a href='$link'$class>" . sprintf(