Tweet #590206962748497920

@johnbillion why isn’t $_SERVER[‘REQUEST_URI’] also directly escaped in add_query_args() ?

From Echofon in reply to johnbillion — 5:34pm Apr 20 2015 —