Changeset 51177 for trunk/src/wp-admin/nav-menus.php

Timestamp:

06/17/2021 02:35:59 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-admin/nav-menus.php (modified) (2 diffs)

trunk/src/wp-admin/nav-menus.php

@@ -690 +690 @@
 
     <nav class="nav-tab-wrapper wp-clearfix" aria-label="<?php esc_attr_e( 'Secondary menu' ); ?>">
-        <a href="<?php echo admin_url( 'nav-menus.php' ); ?>" class="nav-tab<?php echo $nav_tab_active_class; ?>"<?php echo $nav_aria_current; ?>><?php esc_html_e( 'Edit Menus' ); ?></a>
+        <a href="<?php echo esc_url( admin_url( 'nav-menus.php' ) ); ?>" class="nav-tab<?php echo $nav_tab_active_class; ?>"<?php echo $nav_aria_current; ?>><?php esc_html_e( 'Edit Menus' ); ?></a>
         <?php
         if ( $num_locations && $menu_count ) {
@@ -841 +841 @@
         </span><!-- /add-edit-menu-action -->
         <?php else : ?>
-            <form method="get" action="<?php echo admin_url( 'nav-menus.php' ); ?>">
+            <form method="get" action="<?php echo esc_url( admin_url( 'nav-menus.php' ) ); ?>">
             <input type="hidden" name="action" value="edit" />
             <label for="select-menu-to-edit" class="selected-menu"><?php _e( 'Select a menu to edit:' ); ?></label>