Changeset 37131 for branches/3.8/src/wp-admin/network/settings.php

Timestamp:

03/30/2016 04:06:22 PM (9 years ago)

Author:

jeremyfelt

Message:

Multisite: Improve escaping in network settings.

Merge of [37124] to the 3.8 branch.

File:

• branches/3.8/src/wp-admin/network/settings.php (modified) (1 diff)

branches/3.8/src/wp-admin/network/settings.php

@@ -238 +238 @@
                 <th scope="row"><label for="first_comment_author"><?php _e( 'First Comment Author' ) ?></label></th>
                 <td>
-                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" value="<?php echo get_site_option('first_comment_author') ?>" />
+                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" value="<?php echo esc_attr( get_site_option('first_comment_author') ); ?>" />
                     <p class="description">
                         <?php _e( 'The author of the first comment on a new site.' ) ?>