Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().
see #21767 git-svn-id: http://core.svn.wordpress.org/trunk@23563 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
@@ -170,7 +170,7 @@ class WP_Comments_List_Table extends WP_List_Table {
|
||||
/*
|
||||
// I toyed with this, but decided against it. Leaving it in here in case anyone thinks it is a good idea. ~ Mark
|
||||
if ( !empty( $_REQUEST['s'] ) )
|
||||
$link = add_query_arg( 's', esc_attr( stripslashes( $_REQUEST['s'] ) ), $link );
|
||||
$link = add_query_arg( 's', esc_attr( wp_unslash( $_REQUEST['s'] ) ), $link );
|
||||
*/
|
||||
$status_links[$status] = "<a href='$link'$class>" . sprintf(
|
||||
translate_nooped_plural( $label, $num_comments->$status ),
|
||||
|
||||
Reference in New Issue
Block a user