Make WordPress Core


Ignore:
Timestamp:
06/21/2021 04:29:18 AM (4 years ago)
Author:
SergeyBiryukov
Message:

Administration: Consistently escape network_admin_url() links.

Follow-up to [51177].

Props chintan1896, mukesh27.
Fixes #53459.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/network/users.php

    r49944 r51189  
    274274    if ( current_user_can( 'create_users' ) ) :
    275275        ?>
    276         <a href="<?php echo network_admin_url( 'user-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
    277                             <?php
     276        <a href="<?php echo esc_url( network_admin_url( 'user-new.php' ) ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
     277        <?php
    278278    endif;
    279279
Note: See TracChangeset for help on using the changeset viewer.