Changeset 51177 for trunk/src/wp-admin/media-new.php

Timestamp:

06/17/2021 02:35:59 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-admin/media-new.php (modified) (1 diff)

trunk/src/wp-admin/media-new.php

@@ -73 +73 @@
     <h1><?php echo esc_html( $title ); ?></h1>
 
-    <form enctype="multipart/form-data" method="post" action="<?php echo admin_url( 'media-new.php' ); ?>" class="<?php echo esc_attr( $form_class ); ?>" id="file-form">
+    <form enctype="multipart/form-data" method="post" action="<?php echo esc_url( admin_url( 'media-new.php' ) ); ?>" class="<?php echo esc_attr( $form_class ); ?>" id="file-form">
 
     <?php media_upload_form(); ?>