Changeset 51189 for trunk/src/wp-admin/network/sites.php

Timestamp:

06/21/2021 04:29:18 AM (3 years ago)

Author:

SergeyBiryukov

Message:

Administration: Consistently escape network_admin_url() links.

Follow-up to [51177].

Props chintan1896, mukesh27.
Fixes #53459.

File:

• trunk/src/wp-admin/network/sites.php (modified) (1 diff)

trunk/src/wp-admin/network/sites.php

@@ -367 +367 @@
 
 <?php if ( current_user_can( 'create_sites' ) ) : ?>
-    <a href="<?php echo network_admin_url( 'site-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'site' ); ?></a>
+    <a href="<?php echo esc_url( network_admin_url( 'site-new.php' ) ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'site' ); ?></a>
 <?php endif; ?>