From dda708677e49f0c16bf47fcec193074743b9e825 Mon Sep 17 00:00:00 2001 From: Mark Jaquith Date: Thu, 16 Dec 2010 09:24:22 +0000 Subject: [PATCH] Use ENT_QUOTES in esc_textarea() in case someone uses it in a value='' situation by accident. see #15454 git-svn-id: https://develop.svn.wordpress.org/trunk@16993 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-includes/formatting.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/formatting.php b/wp-includes/formatting.php index 82ce377a42..c34c4f1617 100644 --- a/wp-includes/formatting.php +++ b/wp-includes/formatting.php @@ -2368,7 +2368,7 @@ function esc_attr( $text ) { * @return string */ function esc_textarea( $text ) { - $safe_text = htmlspecialchars( $text ); + $safe_text = htmlspecialchars( $text, ENT_QUOTES ); return apply_filters( 'esc_textarea', $safe_text, $text ); }