Changeset 7819

Timestamp:

04/25/2008 05:55:27 AM (17 years ago)

Author:

markjaquith

Message:

attribute_escape() type in the media-uploder. props Alex Concha. for 2.5.1

File:

• branches/2.5/wp-admin/includes/media.php (modified) (1 diff)

branches/2.5/wp-admin/includes/media.php

@@ -943 +943 @@
 
 <form id="filter" action="" method="get">
-<input type="hidden" name="type" value="<?php echo $type; ?>" />
+<input type="hidden" name="type" value="<?php echo attribute_escape( $type ); ?>" />
 <input type="hidden" name="tab" value="<?php echo $tab; ?>" />
 <input type="hidden" name="post_id" value="<?php echo $post_id; ?>" />