Changeset 51177 for trunk/src/wp-admin/comment.php

Timestamp:

06/17/2021 02:35:59 PM (4 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-admin/comment.php (modified) (2 diffs)

trunk/src/wp-admin/comment.php

@@ -233 +233 @@
     <td class="comment-content">
         <?php comment_text( $comment ); ?>
-    <p class="edit-comment"><a href="<?php echo admin_url( "comment.php?action=editcomment&amp;c={$comment->comment_ID}" ); ?>"><?php esc_html_e( 'Edit' ); ?></a></p>
+    <p class="edit-comment"><a href="<?php echo esc_url( admin_url( "comment.php?action=editcomment&c={$comment->comment_ID}" ) ); ?>"><?php esc_html_e( 'Edit' ); ?></a></p>
     </td>
     </tr>
@@ -242 +242 @@
     <p>
         <?php submit_button( $button, 'primary', 'submit', false ); ?>
-    <a href="<?php echo admin_url( 'edit-comments.php' ); ?>" class="button-cancel"><?php esc_html_e( 'Cancel' ); ?></a>
+    <a href="<?php echo esc_url( admin_url( 'edit-comments.php' ) ); ?>" class="button-cancel"><?php esc_html_e( 'Cancel' ); ?></a>
     </p>