Changeset 5044

Timestamp:

03/16/2007 01:20:53 AM (19 years ago)

Author:

ryan

Message:

More attribute_escape().

File:

• trunk/wp-includes/functions.php (modified) (1 diff)

trunk/wp-includes/functions.php

@@ -1281 +1281 @@
         $q = http_build_query($_POST);
         $q = explode( ini_get('arg_separator.output'), $q);
-        $html .= "\t<form method='post' action='$pagenow'>\n";
+        $html .= "\t<form method='post' action='" . attribute_escape($pagenow) . "'>\n";
         foreach ( (array) $q as $a ) {
             $v = substr(strstr($a, '='), 1);