Changeset 9772 for trunk/src/bp-members/bp-members-admin.php

Timestamp:

04/20/2015 03:38:54 PM (10 years ago)

Author:

johnjamesjacoby

Message:

All: make sure URL variables are escaped (trunk)

File:

• trunk/src/bp-members/bp-members-admin.php (modified) (1 diff)

trunk/src/bp-members/bp-members-admin.php

@@ -1334 +1334 @@
         $text    = sprintf( _x( 'Pending %s', 'signup users', 'buddypress' ), '<span class="count">(' . number_format_i18n( $signups ) . ')</span>' );
 
-        $views['registered'] = sprintf( '<a href="%1$s" class="%2$s">%3$s</a>', $url, $class, $text );
+        $views['registered'] = sprintf( '<a href="%1$s" class="%2$s">%3$s</a>', esc_url( $url ), $class, $text );
 
         return $views;