sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Escape playlist data in templates.

Browse Source 
props wonderboymusic.
fixes #27710.


git-svn-id: https://develop.svn.wordpress.org/trunk@28050 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2014-04-08 17:39:06 +00:00
parent 9fab4162f6
commit 248151298c
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/wp-includes/media.php
View File

@ -1020,7 +1020,7 @@ function wp_underscore_playlist_templates() {
<img src="{{ data.thumb.src }}"/>
<# } #>
<div class="wp-playlist-caption">
<span class="wp-playlist-item-meta wp-playlist-item-title">&#8220;{{{ data.title }}}&#8221;</span>
<span class="wp-playlist-item-meta wp-playlist-item-title">&#8220;{{ data.title }}&#8221;</span>
<# if ( data.meta.album ) { #><span class="wp-playlist-item-meta wp-playlist-item-album">{{ data.meta.album }}</span><# } #>
<# if ( data.meta.artist ) { #><span class="wp-playlist-item-meta wp-playlist-item-artist">{{ data.meta.artist }}</span><# } #>
</div>
@ -1194,9 +1194,9 @@ function wp_playlist_shortcode( $attr ) {
$track = array(
'src' => $url,
'type' => $ftype['type'],
'title' => get_the_title( $attachment->ID ),
'caption' => wptexturize( $attachment->post_excerpt ),
'description' => wptexturize( $attachment->post_content )
'title' => $attachment->post_title,
'caption' => $attachment->post_excerpt,
'description' => $attachment->post_content
);
$track['meta'] = array();