Changeset 43365 for trunk/src/wp-admin/includes/template.php

Timestamp:

06/16/2018 01:49:23 PM (6 years ago)

Author:

johnbillion

Message:

Options, Meta APIs: Use the correct escaping function when outputting the meta box context.

Props khaihong, abdullahramzan, leanderiversen, aryamaaru, lbenicio, palmiak

Fixes #44274

File:

• trunk/src/wp-admin/includes/template.php (modified) (1 diff)

trunk/src/wp-admin/includes/template.php

@@ -1100 +1100 @@
     $hidden = get_hidden_meta_boxes( $screen );
 
-    printf( '<div id="%s-sortables" class="meta-box-sortables">', htmlspecialchars( $context ) );
+    printf( '<div id="%s-sortables" class="meta-box-sortables">', esc_attr( $context ) );
 
     // Grab the ones the user has manually sorted. Pull them out of their previous context/priority and into the one the user chose