From f66c061b5f4fc7ceac30c179c71bec729817b14a Mon Sep 17 00:00:00 2001
From: Ryan Boren <ryan@git.wordpress.org>
Date: Fri, 20 Feb 2009 21:35:49 +0000
Subject: [PATCH] Add some escaping

git-svn-id: https://develop.svn.wordpress.org/trunk@10609 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/import/mt.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-admin/import/mt.php b/wp-admin/import/mt.php
index 925fe5f1fd..9a908a105f 100644
--- a/wp-admin/import/mt.php
+++ b/wp-admin/import/mt.php
@@ -39,7 +39,7 @@ class MT_Import {
 <p><?php _e('Howdy! We&#8217;re about to begin importing all of your Movable Type or Typepad entries into WordPress. To begin, either choose a file to upload and click "Upload file and import," or use FTP to upload your MT export file as <code>mt-export.txt</code> in your <code>/wp-content/</code> directory and then click "Import mt-export.txt"'); ?></p>
 
 <?php wp_import_upload_form( add_query_arg('step', 1) ); ?>
-<form method="post" action="<?php echo add_query_arg('step', 1); ?>" class="import-upload-form">
+<form method="post" action="<?php echo attribute_escape(add_query_arg('step', 1)); ?>" class="import-upload-form">
 
 <?php wp_nonce_field('import-upload'); ?>
 <p>