Changeset 51189 for trunk/src/wp-admin/network/site-users.php

Timestamp:

06/21/2021 04:29:18 AM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape network_admin_url() links.

Follow-up to [51177].

Props chintan1896, mukesh27.
Fixes #53459.

File:

• trunk/src/wp-admin/network/site-users.php (modified) (1 diff)

trunk/src/wp-admin/network/site-users.php

@@ -331 +331 @@
     ?>
 <h2 id="add-new-user"><?php _e( 'Add New User' ); ?></h2>
-<form action="<?php echo network_admin_url( 'site-users.php?action=newuser' ); ?>" id="newuser" method="post">
+<form action="<?php echo esc_url( network_admin_url( 'site-users.php?action=newuser' ) ); ?>" id="newuser" method="post">
     <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
     <table class="form-table" role="presentation">