Make WordPress Core


Ignore:
Timestamp:
12/08/2023 09:24:26 PM (6 months ago)
Author:
SergeyBiryukov
Message:

Upload: Add missing escaping in upload_space_setting().

Follow-up to mu:1088, mu:1095, [12603].

Props utsav72640.
Fixes #58514.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/ms.php

    r56599 r57175  
    306306        <th><label for="blog-upload-space-number"><?php _e( 'Site Upload Space Quota' ); ?></label></th>
    307307        <td>
    308             <input type="number" step="1" min="0" style="width: 100px" name="option[blog_upload_space]" id="blog-upload-space-number" aria-describedby="blog-upload-space-desc" value="<?php echo $quota; ?>" />
     308            <input type="number" step="1" min="0" style="width: 100px"
     309                name="option[blog_upload_space]" id="blog-upload-space-number"
     310                aria-describedby="blog-upload-space-desc" value="<?php echo esc_attr( $quota ); ?>" />
    309311            <span id="blog-upload-space-desc"><span class="screen-reader-text">
    310312                <?php
Note: See TracChangeset for help on using the changeset viewer.