sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Properly encode the post title. Props koopersmith, nacin. For trunk 

git-svn-id: https://develop.svn.wordpress.org/trunk@17395 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2011-02-05 18:26:46 +00:00
parent acfa8f4e60
commit 9aa164cfc8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/includes/template.php
View File

@ -270,7 +270,7 @@ function get_inline_data($post) {
if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) ) if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) )
return; return;
$title = esc_attr( trim( $post->post_title ) ); $title = htmlspecialchars( trim( $post->post_title ), ENT_QUOTES );
echo ' echo '
<div class="hidden" id="inline_' . $post->ID . '"> <div class="hidden" id="inline_' . $post->ID . '">