Changeset 41524 for branches/4.7/src/wp-admin/user-edit.php

Timestamp:

09/19/2017 09:20:09 PM (8 years ago)

Author:

ocean90

Message:

Taxonomy/Users: Use correct escaping function for URLs.

Merge of [41522] to the 4.7 branch.

Location:

branches/4.7

Files:

• . (modified) (1 prop)
• src/wp-admin/user-edit.php (modified) (1 diff)

branches/4.7/src/wp-admin/user-edit.php

@@ -183 +183 @@
     <?php endif; ?>
     <?php if ( $wp_http_referer && false === strpos( $wp_http_referer, 'user-new.php' ) && ! IS_PROFILE_PAGE ) : ?>
-    <p><a href="<?php echo esc_url( wp_validate_redirect( wp_sanitize_redirect( $wp_http_referer ), self_admin_url( 'users.php' ) ) ); ?>"><?php _e('&larr; Back to Users'); ?></a></p>
+    <p><a href="<?php echo esc_url( wp_validate_redirect( esc_url_raw( $wp_http_referer ), self_admin_url( 'users.php' ) ) ); ?>"><?php _e('&larr; Back to Users'); ?></a></p>
     <?php endif; ?>
 </div>