Automattic/_s — pull request #147 by ounziw (2013-02-01 22:45:05+00:00)
Title: escape $nav_id

esc_attr($nav_id) before echo