Ticket #18445: 18445.diff

wp-admin/includes/media.php

@@ -1655 +1655 @@
 
                 html = '<img alt="'+alt+'" src="'+f.src.value+'"'+title+cls+' width="'+t.width+'" height="'+t.height+'" />';
 
-                if ( f.url.value )
-                        html = '<a href="'+f.url.value+'">'+html+'</a>';
+                if ( f.url.value ) {
+                        url = f.url.value.replace(/'/g, '&#039;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+                        html = '<a href="'+url+'">'+html+'</a>';
+                }
 
                 if ( caption )
                         html = '[caption id="" align="'+t.align+'" width="'+t.width+'" caption="'+caption+'"]'+html+'[/caption]';