Context Navigation

upgrade.php

Timestamp:

03/17/2007 08:47:29 AM (19 years ago)

Author:

markjaquith

Message:

use clean_url() instead of attribute_escape() when dealing with src/href to protect against XSS. props xknown. fixes #3986 for 2.1.

File:

-              r4656
+              r5057
 switch($step) {
         case 0:
                 $goback = attribute_escape(stripslashes(wp_get_referer()));
+                $goback = clean_url(stripslashes(wp_get_referer()));
 ?>
 <p><?php _e('This file upgrades you from any previous version of WordPress to the latest. It may take a while though, so be patient.'); ?></p>
 …
                         $backto = __get_option('home');
                 else
                         $backto = attribute_escape(stripslashes($_GET['backto']));
+                        $backto = clean_url(stripslashes($_GET['backto']));
 ?>
 <h2><?php _e('Step 1'); ?></h2>

Note: See TracChangeset for help on using the changeset viewer.