mirror of
https://github.com/WordPress/WordPress.git
synced 2025-01-23 08:41:24 +01:00
wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857
git-svn-id: http://svn.automattic.com/wordpress/trunk@3974 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
7c57caf5e8
commit
d95038025d
@ -806,7 +806,7 @@ function is_blog_installed() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
function wp_nonce_url($actionurl, $action = -1) {
|
function wp_nonce_url($actionurl, $action = -1) {
|
||||||
return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
|
return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
|
||||||
}
|
}
|
||||||
|
|
||||||
function wp_nonce_field($action = -1) {
|
function wp_nonce_field($action = -1) {
|
||||||
|
Loading…
Reference in New Issue
Block a user