Changeset 5691 for trunk/src/includes/users/template.php

Timestamp:

04/20/2015 04:20:34 PM (11 years ago)

Author:

johnjamesjacoby

Message:

All: ensure all URLs are escaped (trunk) and cleanup some phpdoc

Also introduce bbp_dropdown class for dropdowns.

File:

• trunk/src/includes/users/template.php (modified) (1 diff)

trunk/src/includes/users/template.php

@@ -1229 +1229 @@
     // Build the variables to pass into printf()
     $dismiss_url  = wp_nonce_url( add_query_arg( $args, $user_url ), $nonce );
-    $dismiss_link = '<a href="' . $dismiss_url . '">' . esc_html_x( 'Cancel', 'Dismiss pending user email address change', 'bbpress' ) . '</a>';
+    $dismiss_link = '<a href="' . esc_url( $dismiss_url ) . '">' . esc_html_x( 'Cancel', 'Dismiss pending user email address change', 'bbpress' ) . '</a>';
     $coded_email  = '<code>' . esc_html( $new_email['newemail'] ) . '</code>'; ?>