Changes in branches/2.8/wp-includes/comment-template.php [11725:11890]

File:

• branches/2.8/wp-includes/comment-template.php (modified) (3 diffs)

branches/2.8/wp-includes/comment-template.php

@@ -338 +338 @@
         $classes = array_merge($classes, $class);
     }
+
+    $classes = array_map('esc_attr', $classes);
 
     return apply_filters('comment_class', $classes, $class, $comment_id, $post_id);
@@ -941 +943 @@
 
     if ( 0 == $number && !comments_open() && !pings_open() ) {
-        echo '<span' . ((!empty($css_class)) ? ' class="' . $css_class . '"' : '') . '>' . $none . '</span>';
+        echo '<span' . ((!empty($css_class)) ? ' class="' . esc_attr( $css_class ) . '"' : '') . '>' . $none . '</span>';
         return;
     }
@@ -973 +975 @@
     echo apply_filters( 'comments_popup_link_attributes', '' );
 
-    echo ' title="' . sprintf( __('Comment on %s'), $title ) . '">';
+    echo ' title="' . esc_attr( sprintf( __('Comment on %s'), $title ) ) . '">';
     comments_number( $zero, $one, $more, $number );
     echo '</a>';