Changeset 37785 for branches/4.4/src/wp-admin/includes/class-wp-media-list-table.php

Timestamp:

06/21/2016 02:22:35 PM (9 years ago)

Author:

nbachiyski

Message:

Admin: Escape attachment name in case it contains special characters

Merge of [37774] to the 4.4 branch.

File:

• branches/4.4/src/wp-admin/includes/class-wp-media-list-table.php (modified) (1 diff)

branches/4.4/src/wp-admin/includes/class-wp-media-list-table.php

@@ -393 +393 @@
             <?php
             $file = get_attached_file( $post->ID );
-            echo wp_basename( $file );
+            echo esc_html( wp_basename( $file ) );
             ?>
         </p>