iandunn fc800115a7 Privacy: Escape comment URLs in personal export file to prevent XSS. ...

There doesn't appear to be any way for an attacker to introduce malicious input into the URL, unless a plugin is filtering the URL to add it, but it's better to be safe than sorry.

Props birgire.
Fixes #44054.

Built from https://develop.svn.wordpress.org/trunk@43245


git-svn-id: http://core.svn.wordpress.org/trunk@43074 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2018-05-12 15:56:21 +00:00

111 KiB

Raw Blame History

View Raw