Changeset 51189 for trunk/src/wp-admin/network/site-new.php

Timestamp:

06/21/2021 04:29:18 AM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape network_admin_url() links.

Follow-up to [51177].

Props chintan1896, mukesh27.
Fixes #53459.

File:

• trunk/src/wp-admin/network/site-new.php (modified) (1 diff)

trunk/src/wp-admin/network/site-new.php

@@ -202 +202 @@
 ?>
 </p>
-<form method="post" action="<?php echo network_admin_url( 'site-new.php?action=add-site' ); ?>" novalidate="novalidate">
+<form method="post" action="<?php echo esc_url( network_admin_url( 'site-new.php?action=add-site' ) ); ?>" novalidate="novalidate">
 <?php wp_nonce_field( 'add-blog', '_wpnonce_add-blog' ); ?>
     <table class="form-table" role="presentation">