mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-03-27 16:54:30 +00:00
deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.
git-svn-id: https://develop.svn.wordpress.org/trunk@11380 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -10,7 +10,7 @@
|
||||
if (!isset($_GET["page"])) require_once('admin.php');
|
||||
|
||||
get_admin_page_title();
|
||||
$title = wp_specialchars( strip_tags( $title ) );
|
||||
$title = esc_html( strip_tags( $title ) );
|
||||
wp_user_settings();
|
||||
wp_menu_unfold();
|
||||
?>
|
||||
|
||||
Reference in New Issue
Block a user