patch by crrodriguez to fix XSS holes (#301181)
drwxr-xr-x - wp-content