sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

attribute_escape content before stuffing it in value attribute. Props Dan Coulter. fixes #3919

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@4986 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2007-03-07 04:29:45 +00:00
parent fa5169f8d3
commit 27229f0110
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/upload-functions.php
View File

@ -18,7 +18,7 @@ function wp_upload_display( $dims = false, $href = '' ) {
the_title(); the_title();
$post_title = attribute_escape(ob_get_contents()); $post_title = attribute_escape(ob_get_contents());
ob_end_clean(); ob_end_clean();
$post_content = apply_filters( 'content_edit_pre', $post->post_content ); $post_content = attribute_escape(apply_filters( 'content_edit_pre', $post->post_content ));
$class = 'text'; $class = 'text';
$innerHTML = get_attachment_innerHTML( $id, false, $dims ); $innerHTML = get_attachment_innerHTML( $id, false, $dims );