From fd3c1fd8e3b6dccd80b1bedcf233dbc0f1213ef0 Mon Sep 17 00:00:00 2001
From: Mark Jaquith <markjaquith@git.wordpress.org>
Date: Mon, 7 Feb 2011 19:11:17 +0000
Subject: [PATCH] A little escaping paranoia, just to be safe. (Already
 sanitized, higher up). for trunk

git-svn-id: https://develop.svn.wordpress.org/trunk@17410 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/includes/template.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/wp-admin/includes/template.php b/wp-admin/includes/template.php
index 622aa2ecbc..b345c36b76 100644
--- a/wp-admin/includes/template.php
+++ b/wp-admin/includes/template.php
@@ -270,16 +270,16 @@ function get_inline_data($post) {
 	if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) )
 		return;
 
-	$title = htmlspecialchars( trim( $post->post_title ), ENT_QUOTES );
+	$title = esc_textarea( trim( $post->post_title ) );
 
 	echo '
 <div class="hidden" id="inline_' . $post->ID . '">
 	<div class="post_title">' . $title . '</div>
 	<div class="post_name">' . apply_filters('editable_slug', $post->post_name) . '</div>
 	<div class="post_author">' . $post->post_author . '</div>
-	<div class="comment_status">' . $post->comment_status . '</div>
-	<div class="ping_status">' . $post->ping_status . '</div>
-	<div class="_status">' . $post->post_status . '</div>
+	<div class="comment_status">' . esc_html( $post->comment_status ) . '</div>
+	<div class="ping_status">' . esc_html( $post->ping_status ) . '</div>
+	<div class="_status">' . esc_html( $post->post_status ) . '</div>
 	<div class="jj">' . mysql2date( 'd', $post->post_date, false ) . '</div>
 	<div class="mm">' . mysql2date( 'm', $post->post_date, false ) . '</div>
 	<div class="aa">' . mysql2date( 'Y', $post->post_date, false ) . '</div>