Ensure get_the_title() is escaped in feed links, props Viper007Bond, fixes #8878

git-svn-id: https://develop.svn.wordpress.org/trunk@10467 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Ozz 2009-01-30 13:50:08 +00:00
parent 6e7efb1d97
commit 0474a02663
1 changed files with 1 additions and 1 deletions

View File

@ -1436,7 +1436,7 @@ function feed_links_extra( $args ) {
if ( is_single() || is_page() ) {
$post = &get_post( $id = 0 );
if ( comments_open() || pings_open() || $post->comment_count > 0 )
echo '<link rel="alternate" type="' . feed_content_type() . '" title="' . sprintf( $args['singletitle'], get_bloginfo('name'), $args['seperator'], get_the_title() ) . '" href="' . get_post_comments_feed_link( $post->ID ) . "\" />\n";
echo '<link rel="alternate" type="' . feed_content_type() . '" title="' . sprintf( $args['singletitle'], get_bloginfo('name'), $args['seperator'], wp_specialchars( get_the_title() ) ) . '" href="' . get_post_comments_feed_link( $post->ID ) . "\" />\n";
}
elseif ( is_category() ) {