Changeset 11706

Timestamp:

07/11/2009 04:17:47 AM (15 years ago)

Author:

azaozz

Message:

Properly escape the title in the feed widget, props nbachiyski, fixes #10378 for 2.8

File:

• branches/2.8/wp-includes/default-widgets.php (modified) (1 diff)

branches/2.8/wp-includes/default-widgets.php

@@ -713 +713 @@
             $desc = esc_attr(strip_tags(@html_entity_decode($rss->get_description(), ENT_QUOTES, get_option('blog_charset'))));
             if ( empty($title) )
-                $title = htmlentities(strip_tags($rss->get_title()));
+                $title = esc_html(strip_tags($rss->get_title()));
             $link = esc_url(strip_tags($rss->get_permalink()));
             while ( stristr($link, 'http') != $link )