Ticket #3595: bookmark-template-php-2-3.diff

E:/EclipseWork/WordPressDev/wp-includes/bookmark-template.php

@@ -96 +96 @@
                 if ( '' != $rel )
                         $rel = ' rel="' . $rel . '"';
 
-                $desc = attribute_escape($row->link_description);
-                $name = attribute_escape($row->link_name);
+                $desc = attribute_escape(sanitize_bookmark_field('link_description', $row->link_description, $row->link_id, 'display'));
+                $name = attribute_escape(sanitize_bookmark_field('link_name', $row->link_name, $row->link_id, 'display'));
                 $title = $desc;
 
                 if ( $show_updated )
@@ -145 +145 @@
 }
 
 function get_linkrating($link) {
-        return apply_filters('link_rating', $link->link_rating);
+        return sanitize_bookmark_field('link_rating', $link->link_rating, $link->link_id, 'display');
 }
 
 /** function get_linkcatname()
@@ -229 +229 @@
                         // Handle each category.
 
                         // Display the category name
-                        echo '  <li id="linkcat-' . $cat->term_id . '" class="linkcat"><h2>' . $cat->name . "</h2>\n\t<ul>\n";
+                        echo '  <li id="linkcat-' . $cat->term_id . '" class="linkcat"><h2>' . apply_filters('link_category', $cat->name ) . "</h2>\n\t<ul>\n";
                         // Call get_links() with all the appropriate params
                         get_links($cat->term_id, '<li>', "</li>", "\n", true, 'name', false);
 
@@ -264 +264 @@
                 if ( '' != $rel )
                         $rel = ' rel="' . $rel . '"';
 
-                $desc = attribute_escape(apply_filters('link_description', $bookmark->link_description)); 
-                $name = attribute_escape(apply_filters('link_title', $bookmark->link_name)); 
+                $desc = attribute_escape(sanitize_bookmark_field('link_description', $row->link_description, $row->link_id, 'display'));
+                $name = attribute_escape(sanitize_bookmark_field('link_name', $row->link_name, $row->link_id, 'display'));
                 $title = $desc;
 
                 if ( $show_updated )