Changeset 37125

Timestamp:

03/30/2016 04:00:25 PM (9 years ago)

Author:

jeremyfelt

Message:

Multisite: Improve escaping in network settings.

Merge of [37124] to the 4.4 branch.

Location:

branches/4.4

Files:

• . (modified) (1 prop)
• src/wp-admin/network/settings.php (modified) (1 diff)

branches/4.4/src/wp-admin/network/settings.php

@@ -259 +259 @@
                 <th scope="row"><label for="first_comment_author"><?php _e( 'First Comment Author' ) ?></label></th>
                 <td>
-                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" aria-describedby="first-comment-author-desc" value="<?php echo get_site_option('first_comment_author') ?>" />
+                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" aria-describedby="first-comment-author-desc" value="<?php echo esc_attr( get_site_option('first_comment_author') ); ?>" />
                     <p class="description" id="first-comment-author-desc">
                         <?php _e( 'The author of the first comment on a new site.' ) ?>