Changeset 11380 for trunk/wp-includes/feed.php

Timestamp:

05/18/2009 03:11:07 PM (15 years ago)

Author:

markjaquith

Message:

deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.

File:

• trunk/wp-includes/feed.php (modified) (1 diff)

trunk/wp-includes/feed.php

@@ -166 +166 @@
         $encode_html = 2;
     if ( 1== $encode_html ) {
-        $content = wp_specialchars($content);
+        $content = esc_html($content);
         $cut = 0;
     } elseif ( 0 == $encode_html ) {