From cb1e71aa2560c75ff810bae267c447e0fb1d63f8 Mon Sep 17 00:00:00 2001
From: joedolson <joedolson@git.wordpress.org>
Date: Tue, 16 Jan 2024 17:31:13 +0000
Subject: [PATCH] Administration: Remove empty form `action` attributes.

Remove the `action` attribute in the login language selector, privacy forms, and classic widget forms.

An empty `action` attribute is invalid HTML4 and unsupported HTML5. The `action` attribute is optional, but must have a valid URL when provided.

Props Malae, audrasjb, bartkleinreesink, nicolefurlan, shubhamsedani, costdev, peterwilsoncc, rajinsharwar, joedolson.
Fixes #58226.
Built from https://develop.svn.wordpress.org/trunk@57295


git-svn-id: http://core.svn.wordpress.org/trunk@56801 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/options-privacy.php | 4 ++--
 wp-admin/widgets-form.php    | 2 +-
 wp-includes/version.php      | 2 +-
 wp-login.php                 | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/wp-admin/options-privacy.php b/wp-admin/options-privacy.php
index 6441a43491..92de2ca9b9 100644
--- a/wp-admin/options-privacy.php
+++ b/wp-admin/options-privacy.php
@@ -270,7 +270,7 @@ wp_admin_notice(
 				</label>
 			</th>
 			<td>
-				<form class="wp-create-privacy-page" method="post" action="">
+				<form class="wp-create-privacy-page" method="post">
 					<input type="hidden" name="action" value="create-privacy-page" />
 					<?php
 					wp_nonce_field( 'create-privacy-page' );
@@ -293,7 +293,7 @@ wp_admin_notice(
 				</label>
 			</th>
 			<td>
-				<form method="post" action="">
+				<form method="post">
 					<input type="hidden" name="action" value="set-privacy-page" />
 					<?php
 					wp_dropdown_pages(
diff --git a/wp-admin/widgets-form.php b/wp-admin/widgets-form.php
index 0c88a8559f..461f8d6fb4 100644
--- a/wp-admin/widgets-form.php
+++ b/wp-admin/widgets-form.php
@@ -478,7 +478,7 @@ foreach ( $wp_registered_sidebars as $sidebar => $registered_sidebar ) {
 
 				<?php if ( $is_inactive_widgets ) { ?>
 				<div class="remove-inactive-widgets">
-					<form action="" method="post">
+					<form method="post">
 						<p>
 							<?php
 							$attributes = array( 'id' => 'inactive-widgets-control-remove' );
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 6d90185489..f064777c75 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '6.5-alpha-57294';
+$wp_version = '6.5-alpha-57295';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.
diff --git a/wp-login.php b/wp-login.php
index 0641cd52e6..9eeac4a96c 100644
--- a/wp-login.php
+++ b/wp-login.php
@@ -364,7 +364,7 @@ function login_footer( $input_id = '' ) {
 		if ( ! empty( $languages ) ) {
 			?>
 			<div class="language-switcher">
-				<form id="language-switcher" action="" method="get">
+				<form id="language-switcher" method="get">
 
 					<label for="language-switcher-locales">
 						<span class="dashicons dashicons-translation" aria-hidden="true"></span>