Changeset 3974

Timestamp:

07/05/2006 09:55:24 AM (18 years ago)

Author:

ryan

Message:

wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857

File:

• trunk/wp-includes/functions.php (modified) (1 diff)

trunk/wp-includes/functions.php

@@ -807 +807 @@
 
 function wp_nonce_url($actionurl, $action = -1) {
-    return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+    return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
 }