Make WordPress Core


Ignore:
Timestamp:
03/30/2016 04:06:22 PM (8 years ago)
Author:
jeremyfelt
Message:

Multisite: Improve escaping in network settings.

Merge of [37124] to the 3.8 branch.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/3.8/src/wp-admin/network/settings.php

    r26641 r37131  
    238238                <th scope="row"><label for="first_comment_author"><?php _e( 'First Comment Author' ) ?></label></th>
    239239                <td>
    240                     <input type="text" size="40" name="first_comment_author" id="first_comment_author" value="<?php echo get_site_option('first_comment_author') ?>" />
     240                    <input type="text" size="40" name="first_comment_author" id="first_comment_author" value="<?php echo esc_attr( get_site_option('first_comment_author') ); ?>" />
    241241                    <p class="description">
    242242                        <?php _e( 'The author of the first comment on a new site.' ) ?>
Note: See TracChangeset for help on using the changeset viewer.