Changeset 5588

Timestamp:

05/29/2007 04:35:23 AM (16 years ago)

Author:

markjaquith

Message:

use clean_url(). Nice catch, g30rg3x. see #4333 for trunk

File:

• trunk/wp-admin/user-edit.php (modified) (1 diff)

trunk/wp-admin/user-edit.php

@@ -77 +77 @@
 <?php wp_nonce_field('update-user_' . $user_id) ?>
 <?php if ( $wp_http_referer ) : ?>
-    <input type="hidden" name="wp_http_referer" value="<?php echo wp_specialchars($wp_http_referer); ?>" />
+    <input type="hidden" name="wp_http_referer" value="<?php echo clean_url($wp_http_referer); ?>" />
 <?php endif; ?>
 <p>