Properly escape plugin admin menu URL's for display. Crops up with custom post_type's with a custom submenu item with & instead of &
git-svn-id: https://develop.svn.wordpress.org/trunk@13851 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
244addfc0d
commit
7d29486ed5
|
@ -144,6 +144,7 @@ function _wp_menu_output( $menu, $submenu, $submenu_as_parent = true ) {
|
||||||
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), $item[2] );
|
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), $item[2] );
|
||||||
else
|
else
|
||||||
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), 'admin.php' );
|
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), 'admin.php' );
|
||||||
|
$sub_item_url = esc_url($sub_item_url);
|
||||||
echo "<li$class><a href='$sub_item_url'$class$tabindex>{$sub_item[0]}</a></li>";
|
echo "<li$class><a href='$sub_item_url'$class$tabindex>{$sub_item[0]}</a></li>";
|
||||||
} else {
|
} else {
|
||||||
echo "<li$class><a href='{$sub_item[2]}'$class$tabindex>{$sub_item[0]}</a></li>";
|
echo "<li$class><a href='{$sub_item[2]}'$class$tabindex>{$sub_item[0]}</a></li>";
|
||||||
|
|
Loading…
Reference in New Issue