Changeset 5679

Timestamp:

06/11/2007 10:41:47 PM (17 years ago)

Author:

ryan

Message:

attribute_escape REQUEST_URI

File:

• trunk/wp-content/themes/default/functions.php (modified) (1 diff)

trunk/wp-content/themes/default/functions.php

@@ -385 +385 @@
         </div>
         <div id="jsForm">
-            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo $_SERVER['REQUEST_URI']; ?>">
+            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo attribute_escape($_SERVER['REQUEST_URI']); ?>">
                 <?php wp_nonce_field('kubrick-header'); ?>
     <input type="button" onclick="tgt=document.getElementById('fontcolor');colorSelect(tgt,'pick1');return false;" name="pick1" id="pick1" value="<?php echo attribute_escape(__('Font Color')); ?>"></input>