Changeset 7818

Timestamp:

04/25/2008 05:55:01 AM (17 years ago)

Author:

markjaquith

Message:

attribute_escape() type in the media-uploder. props Alex Concha. for trunk

File:

• trunk/wp-admin/includes/media.php (modified) (1 diff)

trunk/wp-admin/includes/media.php

@@ -951 +951 @@
 
 <form id="filter" action="" method="get">
-<input type="hidden" name="type" value="<?php echo $type; ?>" />
+<input type="hidden" name="type" value="<?php echo attribute_escape( $type ); ?>" />
 <input type="hidden" name="tab" value="<?php echo $tab; ?>" />
 <input type="hidden" name="post_id" value="<?php echo $post_id; ?>" />