Changeset 41525 for branches/4.6/src/wp-admin/edit-tag-form.php

Timestamp:

09/19/2017 09:27:29 PM (8 years ago)

Author:

ocean90

Message:

Taxonomy/Users: Use correct escaping function for URLs.

Merge of [41522] to the 4.6 branch.

File:

• branches/4.6/src/wp-admin/edit-tag-form.php (modified) (1 diff)

branches/4.6/src/wp-admin/edit-tag-form.php

@@ -75 +75 @@
     <p><strong><?php echo $message; ?></strong></p>
     <?php if ( $wp_http_referer ) { ?>
-    <p><a href="<?php echo esc_url( wp_validate_redirect( wp_sanitize_redirect( $wp_http_referer ), admin_url( 'term.php?taxonomy=' . $taxonomy ) ) ); ?>"><?php
+    <p><a href="<?php echo esc_url( wp_validate_redirect( esc_url_raw( $wp_http_referer ), admin_url( 'term.php?taxonomy=' . $taxonomy ) ) ); ?>"><?php
         /* translators: %s: taxonomy name */
         printf( _x( '&larr; Back to %s', 'admin screen' ), $tax->labels->name );
     ?></a></p>
     <?php } else { ?>
-    <p><a href="<?php echo esc_url( wp_get_referer() ); ?>"><?php
+    <p><a href="<?php echo esc_url( wp_validate_redirect( esc_url_raw( wp_get_referer() ) ) ); ?>"><?php
         /* translators: %s: taxonomy name */
         printf( _x( '&larr; Back to %s', 'admin screen' ), $tax->labels->name );