Changeset 34139 for branches/4.1/src/wp-admin/includes/class-wp-users-list-table.php

Timestamp:

09/14/2015 10:41:12 PM (9 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Merges [34133] for 4.1 branch

File:

• branches/4.1/src/wp-admin/includes/class-wp-users-list-table.php (modified) (1 diff)

branches/4.1/src/wp-admin/includes/class-wp-users-list-table.php

@@ -420 +420 @@
                     break;
                 case 'email':
-                    $r .= "<td $attributes><a href='mailto:$email' title='" . esc_attr( sprintf( __( 'E-mail: %s' ), $email ) ) . "'>$email</a></td>";
+                    $r .= "<td $attributes><a href='" . esc_url( "mailto:$email" ) . "' title='" . esc_attr( sprintf( __( 'E-mail: %s' ), $email ) ) . "'>$email</a></td>";
                     break;
                 case 'role':