Changeset 5680

Timestamp:

06/11/2007 10:43:27 PM (18 years ago)

Author:

ryan

Message:

attribute_escape REQUEST_URI

Location:

branches/2.0

Files:

• wp-content/themes/default/functions.php (modified) (1 diff)
• wp-includes/version.php (modified) (1 diff)

branches/2.0/wp-content/themes/default/functions.php

@@ -378 +378 @@
         </div>
         <div id="jsForm">
-            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo $_SERVER['REQUEST_URI']; ?>">
+            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo attribute_escape($_SERVER['REQUEST_URI']); ?>">
                 <?php wp_nonce_field('kubrick-header'); ?>
                 <input type="button" onclick="tgt=document.getElementById('fontcolor');colorSelect(tgt,'pick1');return false;" name="pick1" id="pick1" value="Font Color"></input>

branches/2.0/wp-includes/version.php

@@ -3 +3 @@
 // This just holds the version number, in a separate file so we can bump it without cluttering the SVN
 
-$wp_version = '2.0.11-RC2';
+$wp_version = '2.0.11-RC3';
 $wp_db_version = 3441;