Changeset 29506

Timestamp:

08/15/2014 05:16:16 PM (12 years ago)

Author:

ocean90

Message:

Plugin details: Escape the donate link.

see #27440.

File:

• trunk/src/wp-admin/includes/plugin-install.php (modified) (2 diffs)

trunk/src/wp-admin/includes/plugin-install.php

@@ -373 +373 @@
 
         iframe_header( __( 'Plugin Install' ) );
-        
+
         $_with_banner = '';
 
@@ -441 +441 @@
                         <li><a target="_blank" href="<?php echo esc_url( $api->homepage ); ?>"><?php _e( 'Plugin Homepage &#187;' ); ?></a></li>
                 <?php } if ( ! empty( $api->donate_link ) && empty( $api->contributors ) ) { ?>
-                        <li><a target="_blank" href="<?php echo $api->donate_link ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a></li>
+                        <li><a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a></li>
                 <?php } ?>
                 </ul>