Changeset 3973

Timestamp:

07/05/2006 09:52:18 AM (19 years ago)

Author:

ryan

Message:

wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857

File:

• branches/2.0/wp-includes/functions.php (modified) (1 diff)

branches/2.0/wp-includes/functions.php

@@ -2317 +2317 @@
 
 function wp_nonce_url($actionurl, $action = -1) {
-    return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+    return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
 }