id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
9540	Site Name In <link rel='index'> Not Escaped	GamerZ	anonymous	"In wp-includes/feed.php:

{{{
#!php
function get_index_rel_link() {
	$link = ""<link rel='index' title='"" . get_bloginfo('name') . ""' href='"" . get_bloginfo('siteurl') . ""' />\n"";
	return apply_filters( ""index_rel_link"", $link );
}
}}}

If the site contains a single quote the HTML will be invalid. Attached is the patch using attributes_escape() to escape quotes."	defect (bug)	closed	normal	2.8	Template		normal	fixed