Make WordPress Core

Changeset 55221


Ignore:
Timestamp:
02/04/2023 07:08:22 AM (13 months ago)
Author:
audrasjb
Message:

Media: Properly escape Download row action link in Media List Table.

Props joedolson, pbiron, audrasjb.
Fixes #57574.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/class-wp-media-list-table.php

    r55218 r55221  
    853853                $actions['download'] = sprintf(
    854854                    '<a href="%s" aria-label="%s" download>%s</a>',
    855                     wp_get_attachment_url( $post->ID ),
     855                    esc_url( wp_get_attachment_url( $post->ID ) ),
    856856                    /* translators: %s: Attachment title. */
    857857                    esc_attr( sprintf( __( 'Download &#8220;%s&#8221;' ), $att_title ) ),
Note: See TracChangeset for help on using the changeset viewer.