From a409f9765798fc9d34ac48ce18f2922b80e19986 Mon Sep 17 00:00:00 2001
From: Mark Jaquith <markjaquith@git.wordpress.org>
Date: Fri, 25 Apr 2008 05:55:01 +0000
Subject: [PATCH] attribute_escape() type in the media-uploder. props Alex
 Concha. for trunk

git-svn-id: https://develop.svn.wordpress.org/trunk@7818 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/includes/media.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-admin/includes/media.php b/wp-admin/includes/media.php
index bb993f8cb1..e9bb44bdb0 100644
--- a/wp-admin/includes/media.php
+++ b/wp-admin/includes/media.php
@@ -950,7 +950,7 @@ function media_upload_library_form($errors) {
 ?>
 
 <form id="filter" action="" method="get">
-<input type="hidden" name="type" value="<?php echo $type; ?>" />
+<input type="hidden" name="type" value="<?php echo attribute_escape( $type ); ?>" />
 <input type="hidden" name="tab" value="<?php echo $tab; ?>" />
 <input type="hidden" name="post_id" value="<?php echo $post_id; ?>" />
 <input type="hidden" name="post_mime_type" value="<?php echo wp_specialchars($_GET['post_mime_type'], true); ?>" />