Changeset 51189 for trunk/src/wp-admin/includes/dashboard.php

Timestamp:

06/21/2021 04:29:18 AM (5 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape network_admin_url() links.

Follow-up to [51177].

Props chintan1896, mukesh27.
Fixes #53459.

File:

• trunk/src/wp-admin/includes/dashboard.php (modified) (2 diffs)

trunk/src/wp-admin/includes/dashboard.php

@@ -485 +485 @@
         ?>
 
-        <form action="<?php echo network_admin_url( 'users.php' ); ?>" method="get">
+        <form action="<?php echo esc_url( network_admin_url( 'users.php' ) ); ?>" method="get">
                 <p>
                         <label class="screen-reader-text" for="search-users"><?php _e( 'Search Users' ); ?></label>
@@ -493 +493 @@
         </form>
 
-        <form action="<?php echo network_admin_url( 'sites.php' ); ?>" method="get">
+        <form action="<?php echo esc_url( network_admin_url( 'sites.php' ) ); ?>" method="get">
                 <p>
                         <label class="screen-reader-text" for="search-sites"><?php _e( 'Search Sites' ); ?></label>