Changeset 10467 for trunk/wp-includes/general-template.php

Timestamp:

01/30/2009 01:50:08 PM (16 years ago)

Author:

azaozz

Message:

Ensure get_the_title() is escaped in feed links, props Viper007Bond, fixes #8878

File:

• trunk/wp-includes/general-template.php (modified) (1 diff)

trunk/wp-includes/general-template.php

@@ -1437 +1437 @@
         $post = &get_post( $id = 0 );
         if ( comments_open() || pings_open() || $post->comment_count > 0 )
-            echo '<link rel="alternate" type="' . feed_content_type() . '" title="' . sprintf( $args['singletitle'], get_bloginfo('name'), $args['seperator'], get_the_title() ) . '" href="' . get_post_comments_feed_link( $post->ID ) . "\" />\n";
+            echo '<link rel="alternate" type="' . feed_content_type() . '" title="' . sprintf( $args['singletitle'], get_bloginfo('name'), $args['seperator'], wp_specialchars( get_the_title() ) ) . '" href="' . get_post_comments_feed_link( $post->ID ) . "\" />\n";
     }