Changeset 37786 for branches/4.3/src/wp-admin/includes/class-wp-media-list-table.php

Timestamp:

06/21/2016 02:23:11 PM (7 years ago)

Author:

nbachiyski

Message:

Admin: Escape attachment name in case it contains special characters

Merge of [37774] to the 4.3 branch.

File:

• branches/4.3/src/wp-admin/includes/class-wp-media-list-table.php (modified) (1 diff)

branches/4.3/src/wp-admin/includes/class-wp-media-list-table.php

@@ -362 +362 @@
             <?php _media_states( $post ); ?>
         </strong>
-        <p class="filename"><span class="screen-reader-text"><?php _e( 'File name:' ); ?> </span><?php echo wp_basename( $post->guid ); ?></p>
+        <p class="filename"><span class="screen-reader-text"><?php _e( 'File name:' ); ?> </span><?php echo esc_html( wp_basename( $post->guid ) ); ?></p>
         <?php
     }