Changeset 51177 for trunk/src/wp-includes/class-wp-embed.php

Timestamp:

06/17/2021 02:35:59 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape admin_url() links.

Props chintan1896, mukesh27.
Fixes #53426.

File:

• trunk/src/wp-includes/class-wp-embed.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-embed.php

@@ -87 +87 @@
             return;
         }
-
         ?>
 <script type="text/javascript">
     jQuery(document).ready(function($){
-        $.get("<?php echo admin_url( 'admin-ajax.php?action=oembed-cache&post=' . $post->ID, 'relative' ); ?>");
+        $.get("<?php echo esc_url( admin_url( 'admin-ajax.php', 'relative' ) ) . '?action=oembed-cache&post=' . $post->ID; ?>");
     });
 </script>