Changeset 17412

Timestamp:

02/07/2011 07:12:00 PM (14 years ago)

Author:

markjaquith

Message:

A little escaping paranoia, just to be safe. (Already sanitized, higher up). for 3.0

File:

• branches/3.0/wp-admin/includes/template.php (modified) (1 diff)

branches/3.0/wp-admin/includes/template.php

@@ -1193 +1193 @@
     <div class="post_name">' . apply_filters('editable_slug', $post->post_name) . '</div>
     <div class="post_author">' . $post->post_author . '</div>
-    <div class="comment_status">' . $post->comment_status . '</div>
-    <div class="ping_status">' . $post->ping_status . '</div>
-    <div class="_status">' . $post->post_status . '</div>
+    <div class="comment_status">' . esc_html( $post->comment_status ) . '</div>
+    <div class="ping_status">' . esc_html( $post->ping_status ) . '</div>
+    <div class="_status">' . esc_html( $post->post_status ) . '</div>
     <div class="jj">' . mysql2date( 'd', $post->post_date, false ) . '</div>
     <div class="mm">' . mysql2date( 'm', $post->post_date, false ) . '</div>