Changeset 34139 for branches/4.1/src/wp-admin/includes/class-wp-ms-users-list-table.php

Timestamp:

09/14/2015 10:41:12 PM (9 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Merges [34133] for 4.1 branch

File:

• branches/4.1/src/wp-admin/includes/class-wp-ms-users-list-table.php (modified) (1 diff)

branches/4.1/src/wp-admin/includes/class-wp-ms-users-list-table.php

@@ -226 +226 @@
 
                     case 'email':
-                        echo "<td $attributes><a href='mailto:$user->user_email'>$user->user_email</a></td>";
+                        echo "<td $attributes><a href='" . esc_url( "mailto:$user->user_email" ) . "'>$user->user_email</a></td>";
                     break;