Changeset 7965 for trunk/bp-themes/bp-default/members/single/messages/messages-loop.php

Timestamp:

02/22/2014 03:50:03 PM (13 years ago)

Author:

djpaul

Message:

Improve string and textarea output escaping throughout BuddyPress.

File:

• trunk/bp-themes/bp-default/members/single/messages/messages-loop.php (modified) (2 diffs)

trunk/bp-themes/bp-default/members/single/messages/messages-loop.php

@@ -41 +41 @@
 
                                 <td width="50%" class="thread-info">
-                                        <p><a href="<?php bp_message_thread_view_link(); ?>" title="<?php _e( "View Message", "buddypress" ); ?>"><?php bp_message_thread_subject(); ?></a></p>
+                                        <p><a href="<?php bp_message_thread_view_link(); ?>" title="<?php esc_attr_e( "View Message", "buddypress" ); ?>"><?php bp_message_thread_subject(); ?></a></p>
                                         <p class="thread-excerpt"><?php bp_message_thread_excerpt(); ?></p>
                                 </td>
@@ -49 +49 @@
                                 <td width="13%" class="thread-options">
                                         <input type="checkbox" name="message_ids[]" value="<?php bp_message_thread_id(); ?>" />
-                                        <a class="button confirm" href="<?php bp_message_thread_delete_link(); ?>" title="<?php _e( "Delete Message", "buddypress" ); ?>"><?php _e( 'Delete', 'buddypress' ); ?></a> &nbsp;
+                                        <a class="button confirm" href="<?php bp_message_thread_delete_link(); ?>" title="<?php esc_attr_e( "Delete Message", "buddypress" ); ?>"><?php _e( 'Delete', 'buddypress' ); ?></a> &nbsp;
                                 </td>
                         </tr>