Changeset 27737 for trunk/src/wp-admin/includes/class-wp-upgrader-skins.php

Timestamp:

03/26/2014 02:38:39 PM (10 years ago)

Author:

nacin

Message:

Upgrader skins: Strip tags before displaying error data.

fixes #25394.

File:

• trunk/src/wp-admin/includes/class-wp-upgrader-skins.php (modified) (2 diffs)

trunk/src/wp-admin/includes/class-wp-upgrader-skins.php

@@ -66 +66 @@
             foreach ( $errors->get_error_messages() as $message ) {
                 if ( $errors->get_error_data() && is_string( $errors->get_error_data() ) )
-                    $this->feedback($message . ' ' . esc_html( $errors->get_error_data() ) );
+                    $this->feedback($message . ' ' . esc_html( strip_tags( $errors->get_error_data() ) ) );
                 else
                     $this->feedback($message);
@@ -218 +218 @@
             foreach ( $error->get_error_messages() as $emessage ) {
                 if ( $error->get_error_data() && is_string( $error->get_error_data() ) )
-                    $messages[] = $emessage . ' ' . esc_html( $error->get_error_data() );
+                    $messages[] = $emessage . ' ' . esc_html( strip_tags( $error->get_error_data() ) );
                 else
                     $messages[] = $emessage;