Changeset 11380 for trunk/wp-admin/includes/widgets.php

Timestamp:

05/18/2009 03:11:07 PM (16 years ago)

Author:

markjaquith

Message:

deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.

File:

• trunk/wp-admin/includes/widgets.php (modified) (1 diff)

trunk/wp-admin/includes/widgets.php

@@ -163 +163 @@
     unset($wp_registered_widgets[$widget_id]['_callback']);
 
-    $widget_title = wp_specialchars( strip_tags( $sidebar_args['widget_name'] ) );
+    $widget_title = esc_html( strip_tags( $sidebar_args['widget_name'] ) );
     $has_form = 'noform';