diff --git a/wp-admin/plugins.php b/wp-admin/plugins.php
index 7295d7168f..b1a93cdb0a 100644
--- a/wp-admin/plugins.php
+++ b/wp-admin/plugins.php
@@ -411,7 +411,7 @@ require_once(ABSPATH . 'wp-admin/admin-header.php');
$invalid = validate_active_plugins();
if ( !empty($invalid) )
foreach ( $invalid as $plugin_file => $error )
- echo '
' . sprintf(__('The plugin %s
has been deactivated due to an error: %s'), esc_html($plugin_file), $error->get_error_message()) . '
';
+ echo '' . sprintf(__('The plugin %s
has been deactivated due to an error: %s'), esc_html($plugin_file), esc_html( $error->get_error_message() ) ) . '
';
?>
- get_error_message() ); ?>
+ get_error_message() ) ); ?>
diff --git a/wp-includes/bookmark.php b/wp-includes/bookmark.php
index 1e178f436f..18952aca86 100644
--- a/wp-includes/bookmark.php
+++ b/wp-includes/bookmark.php
@@ -280,7 +280,7 @@ function get_bookmarks( $args = '' ) {
$query .= " $exclusions $inclusions $search";
$query .= " ORDER BY $orderby $order";
if ( $r['limit'] != -1 ) {
- $query .= ' LIMIT ' . $r['limit'];
+ $query .= ' LIMIT ' . absint( $r['limit'] );
}
$results = $wpdb->get_results( $query );
diff --git a/wp-includes/post-template.php b/wp-includes/post-template.php
index ea3769358f..7802487b5c 100644
--- a/wp-includes/post-template.php
+++ b/wp-includes/post-template.php
@@ -938,10 +938,12 @@ function post_custom( $key = '' ) {
/**
* Display list of post custom fields.
*
- * @internal This will probably change at some point...
* @since 1.2.0
+ *
+ * @deprecated 6.0.2 Use get_post_meta() to retrieve post meta and render manually.
*/
function the_meta() {
+ _deprecated_function( __FUNCTION__, '6.0.2', 'get_post_meta()' );
if ( $keys = get_post_custom_keys() ) {
echo "\n";
foreach ( (array) $keys as $key ) {
@@ -960,7 +962,7 @@ function the_meta() {
* @param string $key Meta key.
* @param string $value Meta value.
*/
- echo apply_filters( 'the_meta_key', "- $key: $value
\n", $key, $value );
+ echo apply_filters( 'the_meta_key', "- " . esc_html( $key ) . ":" . esc_html( $value ) . "
\n", $key, $value );
}
echo "
\n";
}