attribute_escape() type in the media-uploder. props Alex Concha. for trunk

git-svn-id: http://svn.automattic.com/wordpress/trunk@7818 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2008-04-25 05:55:01 +00:00
parent 60aab00ba1
commit 6d0ac532e3

View File

@ -950,7 +950,7 @@ function media_upload_library_form($errors) {
?>
<form id="filter" action="" method="get">
<input type="hidden" name="type" value="<?php echo $type; ?>" />
<input type="hidden" name="type" value="<?php echo attribute_escape( $type ); ?>" />
<input type="hidden" name="tab" value="<?php echo $tab; ?>" />
<input type="hidden" name="post_id" value="<?php echo $post_id; ?>" />
<input type="hidden" name="post_mime_type" value="<?php echo wp_specialchars($_GET['post_mime_type'], true); ?>" />