Changeset 62414

Timestamp:

05/24/2026 09:45:30 PM (4 months ago)

Author:

SergeyBiryukov

Message:

Pings/Trackbacks: Escape the XML error message in trackback_response().

Props maheshpatel, pbiron, sabernhardt, westonruter, SergeyBiryukov.
Fixes #65047.

File:

• trunk/src/wp-trackback.php (modified) (1 diff)

trunk/src/wp-trackback.php

@@ -35 +35 @@
                 echo "<response>\n";
                 echo "<error>1</error>\n";
-                echo "<message>$error_message</message>\n";
+                echo '<message>' . esc_xml( $error_message ) . "</message>\n";
                 echo '</response>';
                 die();