Changeset 34140 for branches/4.0/src/wp-admin/includes/class-wp-ms-users-list-table.php

Timestamp:

09/14/2015 10:42:49 PM (10 years ago)

Author:

nbachiyski

Message:

List tables: escape user e-mails

Merges [34133] for 4.0 branch

File:

• branches/4.0/src/wp-admin/includes/class-wp-ms-users-list-table.php (modified) (1 diff)

branches/4.0/src/wp-admin/includes/class-wp-ms-users-list-table.php

@@ -222 +222 @@
 
                     case 'email':
-                        echo "<td $attributes><a href='mailto:$user->user_email'>$user->user_email</a></td>";
+                        echo "<td $attributes><a href='" . esc_url( "mailto:$user->user_email" ) . "'>$user->user_email</a></td>";
                     break;