Changeset 47465 for branches/5.4/src/wp-includes/nav-menu.php

Timestamp:

03/17/2020 07:19:05 PM (5 years ago)

Author:

SergeyBiryukov

Message:

Menus: When adding a label for special pages in wp_setup_nav_menu_item() strip all HTML tags, as the label is escaped on output.

Follow-up to [47211], [47213].

Props stiofansisland.
Reviewed by whyisjake, SergeyBiryukov.
Merges [47458] to the 5.4 branch.
Fixes #49374.

Location:

branches/5.4

Files:

• . (modified) (1 prop)
• src/wp-includes/nav-menu.php (modified) (1 diff)

branches/5.4/src/wp-includes/nav-menu.php

@@ -823 +823 @@
                         $post_states = get_post_states( $menu_post );
                         if ( $post_states ) {
-                            $menu_item->type_label = implode( ',', $post_states );
+                            $menu_item->type_label = wp_strip_all_tags( implode( ', ', $post_states ) );
                         }
                     }