Changeset 11380 for trunk/wp-includes/feed.php

Timestamp:

05/18/2009 03:11:07 PM (17 years ago)

Author:

markjaquith

Message:

deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.

File:

• trunk/wp-includes/feed.php (modified) (1 diff)

trunk/wp-includes/feed.php

@@ -166 +166 @@
                 $encode_html = 2;
         if ( 1== $encode_html ) {
-                $content = wp_specialchars($content);
+                $content = esc_html($content);
                 $cut = 0;
         } elseif ( 0 == $encode_html ) {