Make WordPress Core

Changeset 45252


Ignore:
Timestamp:
04/19/2019 01:50:32 PM (6 years ago)
Author:
SergeyBiryukov
Message:

Networks and Sites: Use correct escaping function for classes added via ms_user_list_site_class filter.

Props david.binda.
Fixes #46990. See #41146.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/class-wp-ms-users-list-table.php

    r44977 r45252  
    353353            if ( is_array( $site_classes ) && ! empty( $site_classes ) ) {
    354354                $site_classes = array_map( 'sanitize_html_class', array_unique( $site_classes ) );
    355                 echo '<span class="' . sanitize_html_class( implode( ' ', $site_classes ) ) . '">';
     355                echo '<span class="' . esc_attr( implode( ' ', $site_classes ) ) . '">';
    356356            } else {
    357357                echo '<span>';
Note: See TracChangeset for help on using the changeset viewer.