Changeset 37124

Timestamp:

03/30/2016 03:58:29 PM (8 years ago)

Author:

jeremyfelt

Message:

Multisite: Improve escaping in network settings.

File:

• trunk/src/wp-admin/network/settings.php (modified) (1 diff)

trunk/src/wp-admin/network/settings.php

@@ -259 +259 @@
                 <th scope="row"><label for="first_comment_author"><?php _e( 'First Comment Author' ) ?></label></th>
                 <td>
-                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" aria-describedby="first-comment-author-desc" value="<?php echo get_site_option('first_comment_author') ?>" />
+                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" aria-describedby="first-comment-author-desc" value="<?php echo esc_attr( get_site_option('first_comment_author') ); ?>" />
                     <p class="description" id="first-comment-author-desc">
                         <?php _e( 'The author of the first comment on a new site.' ) ?>