Make WordPress Core


Ignore:
Timestamp:
06/21/2016 02:24:16 PM (8 years ago)
Author:
nbachiyski
Message:

Admin: Escape attachment name in case it contains special characters

Merge of [37774] to the 4.2 branch.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/4.2/src/wp-admin/includes/class-wp-media-list-table.php

    r31942 r37789  
    342342            <?php };
    343343            _media_states( $post ); ?></strong>
    344             <p class="filename"><?php echo wp_basename( $post->guid ); ?></p>
     344            <p class="filename"><?php echo esc_html( wp_basename( $post->guid ) ); ?></p>
    345345<?php
    346346        echo $this->row_actions( $this->_get_row_actions( $post, $att_title ) );
Note: See TracChangeset for help on using the changeset viewer.