From 958d135e119464281e5e83cf7efec1c70185a18e Mon Sep 17 00:00:00 2001
From: Andrew Nacin <nacin@git.wordpress.org>
Date: Sat, 13 Nov 2010 11:06:26 +0000
Subject: [PATCH] Escape the class arg in wp_list_categories. props hakre,
 fixes #11514.

git-svn-id: https://develop.svn.wordpress.org/trunk@16341 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-includes/category-template.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-includes/category-template.php b/wp-includes/category-template.php
index d01231df99..aaf2e767d4 100644
--- a/wp-includes/category-template.php
+++ b/wp-includes/category-template.php
@@ -438,7 +438,7 @@ function wp_list_categories( $args = '' ) {
 
 	$output = '';
 	if ( $title_li && 'list' == $style )
-			$output = '<li class="' . $class . '">' . $title_li . '<ul>';
+			$output = '<li class="' . esc_attr( $class ) . '">' . $title_li . '<ul>';
 
 	if ( empty( $categories ) ) {
 		if ( ! empty( $show_option_none ) ) {