mirror_php/wordpress
1
0
Fork 0
mirror of git://develop.git.wordpress.org/ synced 2025-04-07 13:43:25 +02:00
Code Issues Actions20 Packages Projects Releases Wiki Activity

Comments: Escape comment author's email in the Edit Comment form.

Browse Source 
Technically, this is redundant, as the `comment_author`, `comment_author_email`, and `comment_author_url` fields are already escaped via `get_comment_to_edit()` before the form is displayed. 

However, this brings some consistency with the `comment_author` and `comment_author_url` fields being escaped in the same form.

Follow-up to [11721].

Props utsav72640.
Fixes .

git-svn-id: https://develop.svn.wordpress.org/trunk@51080 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Sergey Biryukov 2021-06-07 18:45:56 +00:00
parent 37a4faa7ed
commit bcefcefb58
1 changed files with 1 additions and 1 deletions

2
src/wp-admin/edit-form-comment.php

@ -52,7 +52,7 @@ if ( 'approved' === wp_get_comment_status( $comment ) && $comment->comment_post_
<tr>
<td class="first"><label for="email"><?php _e( 'Email' ); ?></label></td>
<td>
<input type="text" name="newcomment_author_email" size="30" value="<?php echo $comment->comment_author_email; ?>" id="email" />
<input type="text" name="newcomment_author_email" size="30" value="<?php echo esc_attr( $comment->comment_author_email ); ?>" id="email" />
</td>
</tr>
<tr>