diff --git a/wp-admin/admin-ajax.php b/wp-admin/admin-ajax.php
index 7e28ad7179..e004908f62 100644
--- a/wp-admin/admin-ajax.php
+++ b/wp-admin/admin-ajax.php
@@ -508,7 +508,7 @@ case 'add-link-category' : // On the Fly
$x->send();
break;
case 'add-tag' :
- check_ajax_referer( 'add-tag' );
+ check_ajax_referer( 'add-tag', '_wpnonce_add-tag' );
$post_type = !empty($_POST['post_type']) ? $_POST['post_type'] : 'post';
$taxonomy = !empty($_POST['taxonomy']) ? $_POST['taxonomy'] : 'post_tag';
$tax = get_taxonomy($taxonomy);
diff --git a/wp-admin/custom-background.php b/wp-admin/custom-background.php
index 28eec84e8e..62ebacf48f 100644
--- a/wp-admin/custom-background.php
+++ b/wp-admin/custom-background.php
@@ -237,7 +237,6 @@ if ( get_background_image() ) {
-
@@ -270,10 +269,10 @@ if ( get_background_image() ) {
|
|
diff --git a/wp-admin/custom-header.php b/wp-admin/custom-header.php
index 18fe4857f4..4ace47987d 100644
--- a/wp-admin/custom-header.php
+++ b/wp-admin/custom-header.php
@@ -388,7 +388,8 @@ class Custom_Image_Header {
header_text() ) { ?>
toggle_text();
- });
+ });
+/* ]]> */
current_action() ) {
case 'add-tag':
- check_admin_referer( 'add-tag' );
+ check_admin_referer( 'add-tag', '_wpnonce_add-tag' );
if ( !current_user_can( $tax->cap->edit_terms ) )
wp_die( __( 'Cheatin’ uh?' ) );
@@ -328,7 +328,7 @@ if ( current_user_can($tax->cap->edit_terms) ) {
-
+
diff --git a/wp-admin/export.php b/wp-admin/export.php
index b530c89326..024ccf6cf2 100644
--- a/wp-admin/export.php
+++ b/wp-admin/export.php
@@ -109,7 +109,7 @@ function export_date_options() {
continue;
$month = zeroise( $date->month, 2 );
- echo '
' . $wp_locale->get_month( $month ) . ' ' . $date->year . '';
+ echo '
';
}
}
?>
diff --git a/wp-admin/includes/class-wp-posts-list-table.php b/wp-admin/includes/class-wp-posts-list-table.php
index c9c9c13ac8..1049819d1f 100644
--- a/wp-admin/includes/class-wp-posts-list-table.php
+++ b/wp-admin/includes/class-wp-posts-list-table.php
@@ -281,7 +281,7 @@ class WP_Posts_List_Table extends WP_List_Table {
$post_status = !empty( $_REQUEST['post_status'] ) ? $_REQUEST['post_status'] : 'all';
if ( post_type_supports( $post_type, 'comments' ) && !in_array( $post_status, array( 'pending', 'draft', 'future' ) ) )
- $posts_columns['comments'] = '
';
+ $posts_columns['comments'] = '
 ) . ')
';
$posts_columns['date'] = __( 'Date' );
diff --git a/wp-admin/includes/class-wp-terms-list-table.php b/wp-admin/includes/class-wp-terms-list-table.php
index ffca923a72..db8b031abc 100644
--- a/wp-admin/includes/class-wp-terms-list-table.php
+++ b/wp-admin/includes/class-wp-terms-list-table.php
@@ -250,7 +250,7 @@ class WP_Terms_List_Table extends WP_List_Table {
$pad = str_repeat( '— ', max( 0, $this->level ) );
$name = apply_filters( 'term_name', $pad . ' ' . $tag->name, $tag );
$qe_data = get_term( $tag->term_id, $taxonomy, OBJECT, 'edit' );
- $edit_link = get_edit_term_link( $tag->term_id, $taxonomy, $post_type );
+ $edit_link = esc_url( get_edit_term_link( $tag->term_id, $taxonomy, $post_type ) );
$out = '
' . $name . '';
@@ -269,7 +269,7 @@ class WP_Terms_List_Table extends WP_List_Table {
$out .= '
';
$out .= '
' . $qe_data->name . '
';
$out .= '
' . apply_filters( 'editable_slug', $qe_data->slug ) . '
';
- $out .= '
' . $qe_data->parent . '
';
+ $out .= '
' . $qe_data->parent . '
';
return $out;
}
@@ -300,7 +300,7 @@ class WP_Terms_List_Table extends WP_List_Table {
$args['post_type'] = $post_type;
- return "$count";
+ return "$count";
}
function column_links( $tag ) {
diff --git a/wp-admin/includes/class-wp-users-list-table.php b/wp-admin/includes/class-wp-users-list-table.php
index 41a6338ee6..42fd1e0deb 100644
--- a/wp-admin/includes/class-wp-users-list-table.php
+++ b/wp-admin/includes/class-wp-users-list-table.php
@@ -112,7 +112,7 @@ class WP_Users_List_Table extends WP_List_Table {
$name = translate_user_role( $name );
/* translators: User role name with count */
$name = sprintf( __('%1$s (%2$s)'), $name, $avail_roles[$this_role] );
- $role_links[$this_role] = "$name";
+ $role_links[$this_role] = "$name";
}
return $role_links;
diff --git a/wp-admin/includes/dashboard.php b/wp-admin/includes/dashboard.php
index 781efde6e2..88d6111a95 100644
--- a/wp-admin/includes/dashboard.php
+++ b/wp-admin/includes/dashboard.php
@@ -552,7 +552,7 @@ function wp_dashboard_quick_press() {
-
+
diff --git a/wp-admin/includes/nav-menu.php b/wp-admin/includes/nav-menu.php
index a4953bdfd8..7e836e44ce 100644
--- a/wp-admin/includes/nav-menu.php
+++ b/wp-admin/includes/nav-menu.php
@@ -182,7 +182,7 @@ class Walker_Nav_Menu_Edit extends Walker_Nav_Menu {
remove_query_arg($removed_args, admin_url( 'nav-menus.php' ) )
),
'delete-menu_item_' . $item_id
- ); ?>"> | |
@@ -690,7 +690,7 @@ function wp_nav_menu_item_post_type_meta_box( $object, $post_type ) {
-
+ 'submit-quick-search-posttype-' . $post_type_name ) ); ?>