Changes from trunk/wp-includes/media.php at r11529 to branches/2.8/wp-includes/media.php at r11890

File:

• branches/2.8/wp-includes/media.php (modified) (1 diff)

branches/2.8/wp-includes/media.php

@@ -592 +592 @@
         return $content;
 
-    if ( $id ) $id = 'id="' . $id . '" ';
-
-    return '<div ' . $id . 'class="wp-caption ' . $align . '" style="width: ' . (10 + (int) $width) . 'px">'
+    if ( $id ) $id = 'id="' . esc_attr($id) . '" ';
+
+    return '<div ' . $id . 'class="wp-caption ' . esc_attr($align) . '" style="width: ' . (10 + (int) $width) . 'px">'
     . do_shortcode( $content ) . '<p class="wp-caption-text">' . $caption . '</p></div>';
 }