Changeset 12549

Timestamp:

01/31/2020 04:32:54 PM (5 years ago)

Author:

mercime

Message:

Admin: Sanitize external links to activated BP component pages.

Props imath.
See #8235.

File:

• trunk/src/bp-core/admin/bp-core-admin-slugs.php (modified) (1 diff)

trunk/src/bp-core/admin/bp-core-admin-slugs.php

@@ -146 +146 @@
                             <?php if ( !empty( $existing_pages[$name] ) ) : ?>
 
-                                <a href="<?php echo get_permalink( $existing_pages[$name] ); ?>" class="button-secondary" target="_bp"><?php _e( 'View', 'buddypress' ); ?></a>
+                                <a href="<?php echo esc_url( get_permalink( $existing_pages[$name] ) ); ?>" class="button-secondary" target="_bp"><?php _e( 'View', 'buddypress' ); ?></a>
 
                             <?php endif; ?>