Ticket #22135: 22135.2.diff

src/wp-admin/includes/media.php

@@ -248 +248 @@
 ?>
 <script type="text/javascript">
 var win = window.dialogArguments || opener || parent || top;
-win.send_to_editor('<?php echo addslashes($html); ?>');
+win.send_to_editor( <?php echo wp_json_encode( $html ); ?> );
 </script>
 <?php
         exit;