Changeset 34133 for trunk/src/wp-admin/includes/class-wp-ms-users-list-table.php

Timestamp:

09/14/2015 10:32:52 PM (10 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Better safe than sorry.

File:

• trunk/src/wp-admin/includes/class-wp-ms-users-list-table.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-wp-ms-users-list-table.php

@@ -241 +241 @@
      */
     public function column_email( $user ) {
-        echo "<a href='mailto:$user->user_email'>$user->user_email</a>";
+        echo "<a href='" . esc_url( "mailto:$user->user_email" ) . "'>$user->user_email</a>";
     }