Changeset 34133 for trunk/src/wp-admin/includes/class-wp-users-list-table.php

Timestamp:

09/14/2015 10:32:52 PM (11 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Better safe than sorry.

File:

• trunk/src/wp-admin/includes/class-wp-users-list-table.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-wp-users-list-table.php

@@ -435 +435 @@
                         break;
                     case 'email':
-                        $r .= "<a href='mailto:$email'>$email</a>";
+                        $r .= "<a href='" . esc_url( "mailto:$email" ) . "'>$email</a>";
                         break;
                     case 'role':