mirror of
https://github.com/WordPress/WordPress.git
synced 2024-12-23 09:37:42 +01:00
More attribute_escape().
git-svn-id: http://svn.automattic.com/wordpress/trunk@5044 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
95df22248d
commit
12be68075e
@ -1280,7 +1280,7 @@ function wp_nonce_ays($action) {
|
||||
if ( $_POST ) {
|
||||
$q = http_build_query($_POST);
|
||||
$q = explode( ini_get('arg_separator.output'), $q);
|
||||
$html .= "\t<form method='post' action='$pagenow'>\n";
|
||||
$html .= "\t<form method='post' action='" . attribute_escape($pagenow) . "'>\n";
|
||||
foreach ( (array) $q as $a ) {
|
||||
$v = substr(strstr($a, '='), 1);
|
||||
$k = substr($a, 0, -(strlen($v)+1));
|
||||
|
Loading…
Reference in New Issue
Block a user