Changeset 5059

Timestamp:

03/18/2007 11:04:22 PM (18 years ago)

Author:

ryan

Message:

escape pagenow. Props xknown. fixes #3988 for trunk

File:

• trunk/wp-admin/admin-header.php (modified) (1 diff)

trunk/wp-admin/admin-header.php

@@ -3 +3 @@
 if (!isset($_GET["page"])) require_once('admin.php');
 if ( $editing ) {
-    wp_enqueue_script( array("dbx-admin-key?pagenow=$pagenow",'admin-custom-fields') );
+    wp_enqueue_script( array('dbx-admin-key?pagenow=' . attribute_escape($pagenow),'admin-custom-fields') );
     if ( current_user_can('manage_categories') )
         wp_enqueue_script( 'ajaxcat' );