Properly escape plugin admin menu URL's for display. Crops up with custom post_type's with a custom submenu item with & instead of &

git-svn-id: http://svn.automattic.com/wordpress/trunk@13851 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
dd32 2010-03-28 01:32:35 +00:00
parent a47cdd86cb
commit 8f30ffcb9e
1 changed files with 1 additions and 0 deletions

View File

@ -144,6 +144,7 @@ function _wp_menu_output( $menu, $submenu, $submenu_as_parent = true ) {
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), $item[2] );
else
$sub_item_url = add_query_arg( array('page' => $sub_item[2]), 'admin.php' );
$sub_item_url = esc_url($sub_item_url);
echo "<li$class><a href='$sub_item_url'$class$tabindex>{$sub_item[0]}</a></li>";
} else {
echo "<li$class><a href='{$sub_item[2]}'$class$tabindex>{$sub_item[0]}</a></li>";