Ticket #18056: 18056.diff

wp-admin/includes/export.php

@@ -370 +370 @@
                 <title><?php echo apply_filters( 'the_title_rss', $post->post_title ); ?></title>
                 <link><?php the_permalink_rss() ?></link>
                 <pubDate><?php echo mysql2date( 'D, d M Y H:i:s +0000', get_post_time( 'Y-m-d H:i:s', true ), false ); ?></pubDate>
-                <dc:creator><?php echo get_the_author_meta( 'login' ); ?></dc:creator>
+                <dc:creator><?php echo htmlspecialchars(get_the_author_meta( 'login' )); ?></dc:creator>
                 <guid isPermaLink="false"><?php the_guid(); ?></guid>
                 <description></description>
                 <content:encoded><?php echo wxr_cdata( apply_filters( 'the_content_export', $post->post_content ) ); ?></content:encoded>

wp-includes/feed-rdf.php

@@ -40 +40 @@
         <title><?php the_title_rss() ?></title>
         <link><?php the_permalink_rss() ?></link>
          <dc:date><?php echo mysql2date('Y-m-d\TH:i:s\Z', $post->post_date_gmt, false); ?></dc:date>
-        <dc:creator><?php the_author() ?></dc:creator>
+        <dc:creator><?php echo htmlspecialchars(get_the_author()); ?></dc:creator>
         <?php the_category_rss('rdf') ?>
 <?php if (get_option('rss_use_excerpt')) : ?>
         <description><?php the_excerpt_rss() ?></description>

wp-includes/feed-rss2.php

@@ -36 +36 @@
                 <link><?php the_permalink_rss() ?></link>
                 <comments><?php comments_link_feed(); ?></comments>
                 <pubDate><?php echo mysql2date('D, d M Y H:i:s +0000', get_post_time('Y-m-d H:i:s', true), false); ?></pubDate>
-                <dc:creator><?php the_author() ?></dc:creator>
+                <dc:creator><?php echo htmlspecialchars(get_the_author()); ?></dc:creator>
                 <?php the_category_rss('rss2') ?>
 
                 <guid isPermaLink="false"><?php the_guid(); ?></guid>