Ticket #26307: 26307.patch

src/wp-includes/js/wplink.js

@@ -173 +173 @@
                         html = '<a href="' + attrs.href + '"';
 
                         if ( attrs.title )
-                                html += ' title="' + attrs.title + '"';
+                                html += ' title="' + attrs.title.replace( /"/g, '&quot;' ) + '"';
                         if ( attrs.target )
                                 html += ' target="' + attrs.target + '"';