Changeset 5050

Timestamp:

03/16/2007 07:30:21 PM (17 years ago)

Author:

ryan

Message:

attribute_escape pagenow. 2.1

File:

• branches/2.1/wp-includes/functions.php (modified) (1 diff)

branches/2.1/wp-includes/functions.php

@@ -1201 +1201 @@
         $q = http_build_query($_POST);
         $q = explode( ini_get('arg_separator.output'), $q);
-        $html .= "\t<form method='post' action='$pagenow'>\n";
+        $html .= "\t<form method='post' action='" . attribute_escape($pagenow) . "'>\n";
         foreach ( (array) $q as $a ) {
             $v = substr(strstr($a, '='), 1);