Changeset 55135 for trunk/src/wp-admin/includes/class-walker-nav-menu-edit.php

Timestamp:

01/24/2023 09:30:42 PM (4 years ago)

Author:

audrasjb

Message:

Menus: Add missing escaping function in Admin Menu walker.

Props aniketpatel, mukesh27, costdev.
Fixes #57541.

File:

• trunk/src/wp-admin/includes/class-walker-nav-menu-edit.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-walker-nav-menu-edit.php

@@ -181 +181 @@
                                                         '<a class="item-edit" id="edit-%s" href="%s" aria-label="%s"><span class="screen-reader-text">%s</span></a>',
                                                         $item_id,
-                                                        $edit_url,
+                                                        esc_url( $edit_url ),
                                                         esc_attr__( 'Edit menu item' ),
                                                         __( 'Edit' )