Wordpress 3.0.2

[autoinstalls/wordpress.git] / wp-admin / includes / file.php

diff --git a/wp-admin/includes/file.php b/wp-admin/includes/file.php
index 6994a35faaad8f7d28db0f6729addaeca6d5463a..d79f2e34379b7fb1309449f144d1fe0c0cfcffb9 100644 (file)
--- a/wp-admin/includes/file.php
+++ b/wp-admin/includes/file.php
@@ -937,7 +937,7 @@ function request_filesystem_credentials($form_post, $type = '', $error = false,
                $error_string = __('<strong>Error:</strong> There was an error connecting to the server, Please verify the settings are correct.');
                if ( is_wp_error($error) )
                        $error_string = $error->get_error_message();
-               echo '<div id="message" class="error"><p>' . $error_string . '</p></div>';
+               echo '<div id="message" class="error"><p>' . esc_html( $error_string ) . '</p></div>';
        }
 
        $types = array();