Changeset 7965 for trunk/bp-templates/bp-legacy/buddypress/members/single/messages/single.php

Timestamp:

02/22/2014 03:50:03 PM (13 years ago)

Author:

djpaul

Message:

Improve string and textarea output escaping throughout BuddyPress.

File:

• trunk/bp-templates/bp-legacy/buddypress/members/single/messages/single.php (modified) (2 diffs)

trunk/bp-templates/bp-legacy/buddypress/members/single/messages/single.php

@@ -22 +22 @@
                         </span>
 
-                        <a class="button confirm" href="<?php bp_the_thread_delete_link(); ?>" title="<?php _e( "Delete Message", "buddypress" ); ?>"><?php _e( 'Delete', 'buddypress' ); ?></a> &nbsp;
+                        <a class="button confirm" href="<?php bp_the_thread_delete_link(); ?>" title="<?php esc_attr_e( "Delete Message", "buddypress" ); ?>"><?php _e( 'Delete', 'buddypress' ); ?></a> &nbsp;
                 </p>
 
@@ -100 +100 @@
 
                                         <div class="submit">
-                                                <input type="submit" name="send" value="<?php _e( 'Send Reply', 'buddypress' ); ?>" id="send_reply_button"/>
+                                                <input type="submit" name="send" value="<?php esc_attr_e( 'Send Reply', 'buddypress' ); ?>" id="send_reply_button"/>
                                         </div>