Changeset 14104 for trunk/wp-includes/classes.php

Timestamp:

04/16/2010 01:49:52 PM (15 years ago)

Author:

nacin

Message:

Strip tags before escaping the title element in wp_list_pages(). props scribu. fixes #11040.

File:

• trunk/wp-includes/classes.php (modified) (1 diff)

trunk/wp-includes/classes.php

@@ -1299 +1299 @@
         $css_class = implode(' ', apply_filters('page_css_class', $css_class, $page));
 
-        $output .= $indent . '<li class="' . $css_class . '"><a href="' . get_page_link($page->ID) . '" title="' . esc_attr(apply_filters('the_title', $page->post_title)) . '">' . $link_before . apply_filters('the_title', $page->post_title) . $link_after . '</a>';
+        $output .= $indent . '<li class="' . $css_class . '"><a href="' . get_page_link($page->ID) . '" title="' . esc_attr( wp_strip_all_tags( apply_filters( 'the_title', $page->post_title ) ) ) . '">' . $link_before . apply_filters( 'the_title', $page->post_title ) . $link_after . '</a>';
 
         if ( !empty($show_date) ) {