Add a prophylactic specialchars to the object in explain nonce. see #5838
git-svn-id: https://develop.svn.wordpress.org/trunk@6817 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
7886e5c6e0
commit
d809dcd103
@ -1256,7 +1256,7 @@ function wp_explain_nonce( $action ) {
|
||||
$object = $matches[4];
|
||||
if ( 'use_id' != $lookup )
|
||||
$object = call_user_func( $lookup, $object );
|
||||
return sprintf( $trans[$verb][$noun][0], $object );
|
||||
return sprintf( $trans[$verb][$noun][0], wp_specialchars($object) );
|
||||
} else {
|
||||
return $trans[$verb][$noun][0];
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user