Properly encode the post title. Props koopersmith, nacin. For trunk
git-svn-id: https://develop.svn.wordpress.org/trunk@17395 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
acfa8f4e60
commit
9aa164cfc8
@ -270,7 +270,7 @@ function get_inline_data($post) {
|
||||
if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) )
|
||||
return;
|
||||
|
||||
$title = esc_attr( trim( $post->post_title ) );
|
||||
$title = htmlspecialchars( trim( $post->post_title ), ENT_QUOTES );
|
||||
|
||||
echo '
|
||||
<div class="hidden" id="inline_' . $post->ID . '">
|
||||
|
Loading…
Reference in New Issue
Block a user