Changeset 14750

Timestamp:

03/25/2026 11:32:10 AM (3 months ago)

Author:

Otto42

Message:

Photos: Properly escape filename in admin meta box

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/photo-directory/inc/admin.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/photo-directory/inc/admin.php

@@ -1355 +1355 @@
         // Output original filename.
         if ( $orig_filename = get_post_meta( $post_id, Registrations::get_meta_key( 'original_filename' ), true ) ) {
-            printf( $format, 'original-filename', __( 'Original file name', 'wporg-photos' ), $orig_filename );
+            printf( $format, 'original-filename', __( 'Original file name', 'wporg-photos' ), esc_htmk( $orig_filename ) );
         }