Changeset 44779

Timestamp:

02/28/2019 12:07:20 PM (7 years ago)

Author:

SergeyBiryukov

Message:

Privacy: Escape Privacy Policy guide URL in in Privacy Policy edit page notice.

Props itowhid06, garrett-eclipse.
Fixes #44761.

Location:

trunk/src/wp-admin

Files:

• includes/misc.php (modified) (1 diff)
• privacy.php (modified) (1 diff)

trunk/src/wp-admin/includes/misc.php

@@ -1645 +1645 @@
                         printf(
                                 __( 'Need help putting together your new Privacy Policy page? <a href="%1$s" %2$s>Check out our guide%3$s</a> for recommendations on what content to include, along with policies suggested by your plugins and theme.' ),
-                                admin_url( 'tools.php?wp-privacy-policy-guide=1' ),
+                                esc_url( admin_url( 'tools.php?wp-privacy-policy-guide=1' ) ),
                                 'target="_blank"',
                                 sprintf(

trunk/src/wp-admin/privacy.php

@@ -183 +183 @@
                         /* translators: 1: Privacy Policy guide URL, 2: additional link attributes, 3: accessibility text */
                         __( 'Need help putting together your new Privacy Policy page? <a href="%1$s" %2$s>Check out our guide%3$s</a> for recommendations on what content to include, along with policies suggested by your plugins and theme.' ),
-                        admin_url( 'tools.php?wp-privacy-policy-guide' ),
+                        esc_url( admin_url( 'tools.php?wp-privacy-policy-guide' ) ),
                         '',
                         ''