Make WordPress Core


Ignore:
Timestamp:
06/17/2021 02:35:59 PM (7 months ago)
Author:
SergeyBiryukov
Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/themes.php

    r51083 r51177  
    251251
    252252    <?php if ( ! is_multisite() && current_user_can( 'install_themes' ) ) : ?>
    253         <a href="<?php echo admin_url( 'theme-install.php' ); ?>" class="hide-if-no-js page-title-action"><?php echo esc_html_x( 'Add New', 'theme' ); ?></a>
     253        <a href="<?php echo esc_url( admin_url( 'theme-install.php' ) ); ?>" class="hide-if-no-js page-title-action"><?php echo esc_html_x( 'Add New', 'theme' ); ?></a>
    254254    <?php endif; ?>
    255255
Note: See TracChangeset for help on using the changeset viewer.