Changeset 11110 for trunk/wp-admin/theme-editor.php

Timestamp:

04/28/2009 06:37:51 AM (15 years ago)

Author:

ryan

Message:

attr escaping. see #9650

File:

• trunk/wp-admin/theme-editor.php (modified) (5 diffs)

trunk/wp-admin/theme-editor.php

@@ -95 +95 @@
 
             $docs_select = '<select name="docs-list" id="docs-list">';
-            $docs_select .= '<option value="">' . __( 'Function Name...' ) . '</option>';
+            $docs_select .= '<option value="">' . _a( 'Function Name...' ) . '</option>';
             foreach ( $functions as $function ) {
                 $docs_select .= '<option value="' . urlencode( $function ) . '">' . htmlspecialchars( $function ) . '()</option>';
@@ -131 +131 @@
 ?>
         </select>
-        <input type="submit" name="Submit" value="<?php _e('Select') ?>" class="button" />
+        <input type="submit" name="Submit" value="<?php _ea('Select') ?>" class="button" />
     </form>
 </div>
@@ -200 +200 @@
          <div><textarea cols="70" rows="25" name="newcontent" id="newcontent" tabindex="1" class="codepress <?php echo $codepress_lang ?>"><?php echo $content ?></textarea>
          <input type="hidden" name="action" value="update" />
-         <input type="hidden" name="file" value="<?php echo $file ?>" />
-         <input type="hidden" name="theme" value="<?php echo $theme ?>" />
+         <input type="hidden" name="file" value="<?php echo attr($file) ?>" />
+         <input type="hidden" name="theme" value="<?php echo attr($theme) ?>" />
          </div>
     <?php if ( isset($functions ) && count($functions) ) { ?>
@@ -207 +207 @@
         <label for="docs-list"><?php _e('Documentation:') ?></label>
         <?php echo $docs_select; ?>
-        <input type="button" class="button" value=" <?php _e( 'Lookup' ); ?> " onclick="if ( '' != jQuery('#docs-list').val() ) { window.open( 'http://api.wordpress.org/core/handbook/1.0/?function=' + escape( jQuery( '#docs-list' ).val() ) + '&locale=<?php echo urlencode( get_locale() ) ?>&version=<?php echo urlencode( $wp_version ) ?>&redirect=true'); }" />
+        <input type="button" class="button" value=" <?php _ea( 'Lookup' ); ?> " onclick="if ( '' != jQuery('#docs-list').val() ) { window.open( 'http://api.wordpress.org/core/handbook/1.0/?function=' + escape( jQuery( '#docs-list' ).val() ) + '&locale=<?php echo urlencode( get_locale() ) ?>&version=<?php echo urlencode( $wp_version ) ?>&redirect=true'); }" />
         </div>
     <?php } ?>
@@ -215 +215 @@
             <p class="submit">
 <?php
-    echo "<input type='submit' name='submit' class='button-primary' value='" . __('Update File') . "' tabindex='2' />";
+    echo "<input type='submit' name='submit' class='button-primary' value='" . _a('Update File') . "' tabindex='2' />";
 ?>
 </p>