Changeset 59407

Timestamp:

11/16/2024 11:13:43 PM (2 weeks ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Escape attachment URL in wp-admin/async-upload.php.

Follow-up to [58279].

Props shyamkariya, pitamdey, nareshbheda, ketanniruke, desrosj.
Fixes #62434.

File:

• trunk/src/wp-admin/async-upload.php (modified) (1 diff)

trunk/src/wp-admin/async-upload.php

@@ -75 +75 @@
                             ?>
                             <span class="media-item-copy-container copy-to-clipboard-container edit-attachment">
-                                <button type="button" class="button button-small copy-attachment-url" data-clipboard-text="<?php echo $file_url; ?>"><?php _e( 'Copy URL to clipboard' ); ?></button>
+                                <button type="button" class="button button-small copy-attachment-url"
+                                    data-clipboard-text="<?php echo esc_url( $file_url ); ?>"
+                                ><?php _e( 'Copy URL to clipboard' ); ?></button>
                                 <span class="success hidden" aria-hidden="true"><?php _e( 'Copied!' ); ?></span>
                             </span>