diff --git a/wp-includes/formatting.php b/wp-includes/formatting.php index adf95cfb9b..874e48d5bd 100644 --- a/wp-includes/formatting.php +++ b/wp-includes/formatting.php @@ -1105,7 +1105,7 @@ function htmlentities2($myHTML) { // Escape single quotes, specialchar double quotes, and fix line endings. function js_escape($text) { $safe_text = wp_specialchars($text, 'double'); - $safe_text = str_replace(''', "'", $safe_text); + $safe_text = preg_replace('/&#(x)?0*(?(1)27|39);?/i', "'", stripslashes($safe_text)); $safe_text = preg_replace("/\r?\n/", "\\n", addslashes($safe_text)); return apply_filters('js_escape', $safe_text, $text); }