Skip to:
Content

BuddyPress.org


Ignore:
Timestamp:
04/20/2015 04:08:00 PM (11 years ago)
Author:
johnjamesjacoby
Message:

All: make sure URLs are escaped (2.2 branch)

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.2/src/bp-activity/bp-activity-admin.php

    r9592 r9773  
    650650        <?php if ( ! empty( $activity ) ) : ?>
    651651
    652             <form action="<?php echo esc_attr( $form_url ); ?>" id="bp-activities-edit-form" method="post">
     652            <form action="<?php echo esc_url( $form_url ); ?>" id="bp-activities-edit-form" method="post">
    653653                <div id="poststuff">
    654654
     
    12801280
    12811281        <ul class="subsubsub">
    1282             <li class="all"><a href="<?php echo esc_attr( esc_url( $url_base ) ); ?>" class="<?php if ( 'spam' != $this->view ) echo 'current'; ?>"><?php _e( 'All', 'buddypress' ); ?></a> |</li>
    1283             <li class="spam"><a href="<?php echo esc_attr( esc_url( add_query_arg( 'activity_status', 'spam', $url_base ) ) ); ?>" class="<?php if ( 'spam' == $this->view ) echo 'current'; ?>"><?php printf( __( 'Spam <span class="count">(%s)</span>', 'buddypress' ), number_format_i18n( $this->spam_count ) ); ?></a></li>
     1282            <li class="all"><a href="<?php echo esc_url( $url_base ); ?>" class="<?php if ( 'spam' != $this->view ) echo 'current'; ?>"><?php _e( 'All', 'buddypress' ); ?></a> |</li>
     1283            <li class="spam"><a href="<?php echo esc_url( add_query_arg( 'activity_status', 'spam', $url_base ) ); ?>" class="<?php if ( 'spam' == $this->view ) echo 'current'; ?>"><?php printf( __( 'Spam <span class="count">(%s)</span>', 'buddypress' ), number_format_i18n( $this->spam_count ) ); ?></a></li>
    12841284
    12851285            <?php
Note: See TracChangeset for help on using the changeset viewer.