[wp-trac] Re: [WordPress Trac] #5422: Sanitize plugin update information

[WordPress Trac]

#5422: Sanitize plugin update information
-------------------------------------+--------------------------------------
 Reporter:  Viper007Bond             |        Owner:  westi 
     Type:  defect (bug)             |       Status:  closed
 Priority:  normal                   |    Milestone:  2.8   
Component:  Security                 |      Version:  2.3.1 
 Severity:  critical                 |   Resolution:  fixed 
 Keywords:  has-patch tested commit  |  
-------------------------------------+--------------------------------------

Comment(by hakre):

 & were not properly handeled. wp_nonce_url does not need it in input
 and the other three urls needed a esc_attr() to have them.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/5422#comment:12>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software