Changeset 11380 for trunk/wp-includes/classes.php

Timestamp:

05/18/2009 03:11:07 PM (17 years ago)

Author:

markjaquith

Message:

deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.

File:

• trunk/wp-includes/classes.php (modified) (1 diff)

trunk/wp-includes/classes.php

@@ -1253 +1253 @@
                         $output .= ' selected="selected"';
                 $output .= '>';
-                $title = wp_specialchars($page->post_title);
+                $title = esc_html($page->post_title);
                 $output .= "$pad$title";
                 $output .= "</option>\n";