Changeset 53839 for trunk/src/wp-admin/update-core.php

Timestamp:

08/05/2022 05:58:01 AM (4 years ago)

Author:

audrasjb

Message:

Coding standards: Properly escape URLs returned by self_admin_url() calls.

Props krishaweb, audrasjb, SergeyBiryukov.
Fixes #56329.

File:

• trunk/src/wp-admin/update-core.php (modified) (1 diff)

trunk/src/wp-admin/update-core.php

@@ -918 +918 @@
     </div>
     <script type="text/javascript">
-    window.location = '<?php echo self_admin_url( 'about.php?updated' ); ?>';
+    window.location = '<?php echo esc_url( self_admin_url( 'about.php?updated' ) ); ?>';
     </script>
     <?php