Make WordPress Core

Changeset 53960


Ignore:
Timestamp:
08/30/2022 03:14:26 PM (2 years ago)
Author:
SergeyBiryukov
Message:

Plugins: Escape output in error messages.

Props tykoted, paulkevan, peterwilsoncc.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/plugins.php

    r53839 r53960  
    613613            __( 'The plugin %1$s has been deactivated due to an error: %2$s' ),
    614614            '<code>' . esc_html( $plugin_file ) . '</code>',
    615             $error->get_error_message()
     615            esc_html( $error->get_error_message() )
    616616        );
    617617        echo '</p></div>';
     
    677677                    /* translators: %s: Error message. */
    678678                    __( 'Plugin could not be deleted due to an error: %s' ),
    679                     $delete_result->get_error_message()
     679                    esc_html( $delete_result->get_error_message() )
    680680                );
    681681                ?>
Note: See TracChangeset for help on using the changeset viewer.