Changeset 11200 for trunk/wp-includes/media.php

Timestamp:

05/05/2009 07:35:03 AM (16 years ago)

Author:

azaozz

Message:

Escape caption in [gallery] output, props MattyRob, fixes #8763

File:

• trunk/wp-includes/media.php (modified) (1 diff)

trunk/wp-includes/media.php

@@ -685 +685 @@
             $output .= "
                 <{$captiontag} class='gallery-caption'>
-                {$attachment->post_excerpt}
+                " . wp_specialchars($attachment->post_excerpt) . "
                 </{$captiontag}>";
         }