From 17520269503e34f248b47960536b43a46355761a Mon Sep 17 00:00:00 2001
From: ryan <ryan@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Fri, 20 Feb 2009 21:36:09 +0000
Subject: [PATCH] Add some escaping

git-svn-id: http://svn.automattic.com/wordpress/branches/2.7@10610 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/import/mt.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-admin/import/mt.php b/wp-admin/import/mt.php
index 48d4de3b69..28d7661190 100644
--- a/wp-admin/import/mt.php
+++ b/wp-admin/import/mt.php
@@ -39,7 +39,7 @@ class MT_Import {
 <p><?php _e('Howdy! We&#8217;re about to begin importing all of your Movable Type or Typepad entries into WordPress. To begin, either choose a file to upload and click "Upload file and import," or use FTP to upload your MT export file as <code>mt-export.txt</code> in your <code>/wp-content/</code> directory and then click "Import mt-export.txt"'); ?></p>
 
 <?php wp_import_upload_form( add_query_arg('step', 1) ); ?>
-<form method="post" action="<?php echo add_query_arg('step', 1); ?>" class="import-upload-form">
+<form method="post" action="<?php echo attribute_escape(add_query_arg('step', 1)); ?>" class="import-upload-form">
 
 <?php wp_nonce_field('import-upload'); ?>
 <p>