Changeset 54834 for trunk/src/wp-admin/nav-menus.php

Timestamp:

11/14/2022 11:48:18 AM (23 months ago)

Author:

SergeyBiryukov

Message:

Administration: Add missing escaping for a few strings used as HTML attributes.

Follow-up to [47209], [50997], [51006].

Props kowsar89, riccardodicurti, audrasjb, krupalpanchal, SergeyBiryukov.
Fixes #57093.

File:

• trunk/src/wp-admin/nav-menus.php (modified) (1 diff)

trunk/src/wp-admin/nav-menus.php

@@ -1041 +1041 @@
                                         <span class="bulk-select-button-label"><?php _e( 'Bulk Select' ); ?></span>
                                     </label>
-                                    <input type="button" class="deletion menu-items-delete disabled" value="<?php _e( 'Remove Selected Items' ); ?>">
+                                    <input type="button" class="deletion menu-items-delete disabled" value="<?php esc_attr_e( 'Remove Selected Items' ); ?>">
                                     <div id="pending-menu-items-to-delete">
                                         <p><?php _e( 'List of menu items selected for deletion:' ); ?></p>