Make WordPress Core


Ignore:
Timestamp:
10/17/2008 08:06:22 PM (17 years ago)
Author:
markjaquith
Message:

Covering our XSS bases

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/media-upload.php

    r9232 r9233  
    5757    require_once('admin-header.php'); ?>
    5858    <div class="wrap">
    59     <h2><?php echo $title ?></h2>
     59    <h2><?php echo wp_specialchars( $title ); ?></h2>
    6060
    6161    <form enctype="multipart/form-data" method="post" action="media-upload.php?inline=&amp;upload-page-form=" class="media-upload-form type-form validate" id="file-form">
Note: See TracChangeset for help on using the changeset viewer.