Ticket #11119: press-this-xss-bug-11-10-2009.patch

wp-admin/press-this.php

@@ -91 +91 @@
 }
 
 // Set Variables
-$title = isset($_GET['t']) ? esc_html(aposfix(stripslashes($_GET['t']))) : '';
-$selection = isset($_GET['s']) ? trim( aposfix( stripslashes($_GET['s']) ) ) : '';
+$title = isset($_GET['t']) ? esc_html( aposfix(stripslashes( $_GET['t'] )) ) : '';
+$selection = isset($_GET['s']) ? esc_html( trim(aposfix(stripslashes( $_GET['s'] ))) ) : '';
 if ( ! empty($selection) ) {
         $selection = preg_replace('/(\r?\n|\r)/', '</p><p>', $selection);
         $selection = '<p>'.str_replace('<p></p>', '', $selection).'</p>';