Ticket #24301: 24301.2.diff

wp-admin/includes/post-formats.php

@@ -33 +33 @@
                                         } elseif ( ! preg_match( '#<[^>]+>#', $value ) ) {
                                                 printf( '<img src="%s" alt="" />', esc_url( $value ) );
                                         } else {
-                                                echo $value;
+                                                echo strip_tags( $value, '<a><img>' );
                                         }
                                 ?>
                         </div>