Make WordPress Core

Changeset 53963


Ignore:
Timestamp:
08/30/2022 03:19:08 PM (21 months ago)
Author:
SergeyBiryukov
Message:

Plugins: Escape output in error messages.

Props tykoted, paulkevan, peterwilsoncc.
Merges [53960] to the 6.0 branch.

Location:
branches/6.0
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/6.0

  • branches/6.0/src/wp-admin/plugins.php

    r52978 r53963  
    613613            __( 'The plugin %1$s has been deactivated due to an error: %2$s' ),
    614614            '<code>' . esc_html( $plugin_file ) . '</code>',
    615             $error->get_error_message()
     615            esc_html( $error->get_error_message() )
    616616        );
    617617        echo '</p></div>';
     
    677677                    /* translators: %s: Error message. */
    678678                    __( 'Plugin could not be deleted due to an error: %s' ),
    679                     $delete_result->get_error_message()
     679                    esc_html( $delete_result->get_error_message() )
    680680                );
    681681                ?>
Note: See TracChangeset for help on using the changeset viewer.