wp_specialchars() within wp_nonce_url(). Props Nazgul. fixes #2857

git-svn-id: http://svn.automattic.com/wordpress/trunk@3974 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2006-07-05 09:55:24 +00:00 · 2006-07-05 09:55:24 +00:00 · d95038025d
parent 7c57caf5e8
commit d95038025d
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/functions.php
+++ b/wp-includes/functions.php
@ -806,7 +806,7 @@ function is_blog_installed() {
 }

 function wp_nonce_url($actionurl, $action = -1) {
-	return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+	return wp_specialchars(add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl));
 }

 function wp_nonce_field($action = -1) {