Changeset 7965 for trunk/bp-messages/bp-messages-template.php

Timestamp:

02/22/2014 03:50:03 PM (11 years ago)

Author:

djpaul

Message:

Improve string and textarea output escaping throughout BuddyPress.

File:

• trunk/bp-messages/bp-messages-template.php (modified) (1 diff)

trunk/bp-messages/bp-messages-template.php

@@ -430 +430 @@
     <form action="" method="get" id="search-message-form">
         <label><input type="text" name="s" id="messages_search" <?php if ( $search_value === $default_search_value ) : ?>placeholder="<?php echo esc_html( $search_value ); ?>"<?php endif; ?> <?php if ( $search_value !== $default_search_value ) : ?>value="<?php echo esc_html( $search_value ); ?>"<?php endif; ?> /></label>
-        <input type="submit" id="messages_search_submit" name="messages_search_submit" value="<?php _e( 'Search', 'buddypress' ) ?>" />
+        <input type="submit" id="messages_search_submit" name="messages_search_submit" value="<?php esc_attr_e( 'Search', 'buddypress' ) ?>" />
     </form>