Some extra XSS protection. Redundant, but we should always escape late! see #11119

git-svn-id: http://svn.automattic.com/wordpress/trunk@12169 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2009-11-12 02:37:28 +00:00
parent 17ad540a6c
commit 2a77fc75cd
1 changed files with 1 additions and 1 deletions

View File

@ -582,7 +582,7 @@ var photostorage = false;
echo '<p>';
if ( $selection )
_e('via ');
echo "<a href='$url'>$title</a>.</p>";
printf( "<a href='%s'>%s</a>.</p>", esc_url( $url ), esc_html( $title ) );
}
?></textarea>
</div>