Changeset 5680 for branches/2.0/wp-content/themes/default/functions.php

Timestamp:

06/11/2007 10:43:27 PM (17 years ago)

Author:

ryan

Message:

attribute_escape REQUEST_URI

File:

• branches/2.0/wp-content/themes/default/functions.php (modified) (1 diff)

branches/2.0/wp-content/themes/default/functions.php

@@ -378 +378 @@
         </div>
         <div id="jsForm">
-            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo $_SERVER['REQUEST_URI']; ?>">
+            <form style="display:inline;" method="post" name="hicolor" id="hicolor" action="<?php echo attribute_escape($_SERVER['REQUEST_URI']); ?>">
                 <?php wp_nonce_field('kubrick-header'); ?>
                 <input type="button" onclick="tgt=document.getElementById('fontcolor');colorSelect(tgt,'pick1');return false;" name="pick1" id="pick1" value="Font Color"></input>