wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857
git-svn-id: https://develop.svn.wordpress.org/trunk@3974 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
a3301d96ab
commit
6bfc22facd
@ -806,7 +806,7 @@ function is_blog_installed() {
|
||||
}
|
||||
|
||||
function wp_nonce_url($actionurl, $action = -1) {
|
||||
return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
|
||||
return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
|
||||
}
|
||||
|
||||
function wp_nonce_field($action = -1) {
|
||||
|
Loading…
Reference in New Issue
Block a user