Ticket #19877: 19877.2.diff

wp-includes/kses.php

@@ -974 +974 @@
 /**
  * Strips slashes from in front of quotes.
  *
- * This function changes the character sequence \" to just ". It leaves all
+ * This function changes the character sequence \" or \' to just " or '. It leaves all
  * other slashes alone. It's really weird, but the quoting from
  * preg_replace(//e) seems to require this.
  *
@@ -983 +983 @@
  * @param string $string String to strip slashes
  * @return string Fixed string with quoted slashes
  */
-function wp_kses_stripslashes($string) {
-        return preg_replace('%\\\\"%', '"', $string);
+function wp_kses_stripslashes( $string ) {
+        $string = preg_replace( '%\\\\"%', '"', $string );
+        $string = preg_replace( "%\\\\'%", "'", $string );
+        
+        return $string;
 }
 
 /**