Changeset 34137 for branches/4.3/src/wp-admin/includes/class-wp-ms-users-list-table.php

Timestamp:

09/14/2015 10:39:34 PM (9 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Merges [34133] for 4.3 branch

File:

• branches/4.3/src/wp-admin/includes/class-wp-ms-users-list-table.php (modified) (1 diff)

branches/4.3/src/wp-admin/includes/class-wp-ms-users-list-table.php

@@ -234 +234 @@
      */
     public function column_email( $user ) {
-        echo "<a href='mailto:$user->user_email'>$user->user_email</a>";
+        echo "<a href='" . esc_url( "mailto:$user->user_email" ) . "'>$user->user_email</a>";
     }