Changeset 29506 for trunk/src/wp-admin/includes/plugin-install.php

Timestamp:

08/15/2014 05:16:16 PM (10 years ago)

Author:

ocean90

Message:

Plugin details: Escape the donate link.

see #27440.

File:

• trunk/src/wp-admin/includes/plugin-install.php (modified) (2 diffs)

trunk/src/wp-admin/includes/plugin-install.php

@@ -373 +373 @@
 
     iframe_header( __( 'Plugin Install' ) );
-    
+
     $_with_banner = '';
 
@@ -441 +441 @@
             <li><a target="_blank" href="<?php echo esc_url( $api->homepage ); ?>"><?php _e( 'Plugin Homepage &#187;' ); ?></a></li>
         <?php } if ( ! empty( $api->donate_link ) && empty( $api->contributors ) ) { ?>
-            <li><a target="_blank" href="<?php echo $api->donate_link ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a></li>
+            <li><a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a></li>
         <?php } ?>
         </ul>