Changeset 14127 for trunk/wp-admin/menu-header.php

Timestamp:

04/18/2010 03:38:47 AM (16 years ago)

Author:

dd32

Message:

Escape/texturize Admin menu titles. Fixes page titles such as "Foo & Bar" not being entity encoded. Also includes some basic whitespace/standards cleanup to a related function. Fixes #12039

File:

• trunk/wp-admin/menu-header.php (modified) (4 diffs)

trunk/wp-admin/menu-header.php

@@ -70 +70 @@
         $toggle = '<div class="wp-menu-toggle"><br /></div>';
 
+        $title = wptexturize($item[0]);
+
         echo "\n\t<li$class$id>";
 
@@ -82 +84 @@
             if ( ( ('index.php' != $submenu[$item[2]][0][2]) && file_exists(WP_PLUGIN_DIR . "/$menu_file") ) || !empty($menu_hook)) {
                 $admin_is_parent = true;
-                echo "<div class='wp-menu-image'><a href='admin.php?page={$submenu[$item[2]][0][2]}'>$img</a></div>$toggle<a href='admin.php?page={$submenu[$item[2]][0][2]}'$class$tabindex>{$item[0]}</a>";
+                echo "<div class='wp-menu-image'><a href='admin.php?page={$submenu[$item[2]][0][2]}'>$img</a></div>$toggle<a href='admin.php?page={$submenu[$item[2]][0][2]}'$class$tabindex>$title</a>";
             } else {
-                echo "\n\t<div class='wp-menu-image'><a href='{$submenu[$item[2]][0][2]}'>$img</a></div>$toggle<a href='{$submenu[$item[2]][0][2]}'$class$tabindex>{$item[0]}</a>";
+                echo "\n\t<div class='wp-menu-image'><a href='{$submenu[$item[2]][0][2]}'>$img</a></div>$toggle<a href='{$submenu[$item[2]][0][2]}'$class$tabindex>$title</a>";
             }
         } else if ( current_user_can($item[1]) ) {
@@ -139 +141 @@
                     $sub_file = substr($sub_file, 0, $pos);
 
+                $title = wptexturize($sub_item[0]);
+
                 if ( ( ('index.php' != $sub_item[2]) && file_exists(WP_PLUGIN_DIR . "/$sub_file") ) || ! empty($menu_hook) ) {
                     // If admin.php is the current page or if the parent exists as a file in the plugins or admin dir
@@ -146 +150 @@
                         $sub_item_url = add_query_arg( array('page' => $sub_item[2]), 'admin.php' );
                     $sub_item_url = esc_url($sub_item_url);
-                    echo "<li$class><a href='$sub_item_url'$class$tabindex>{$sub_item[0]}</a></li>";
+                    echo "<li$class><a href='$sub_item_url'$class$tabindex>$title</a></li>";
                 } else {
-                    echo "<li$class><a href='{$sub_item[2]}'$class$tabindex>{$sub_item[0]}</a></li>";
+                    echo "<li$class><a href='{$sub_item[2]}'$class$tabindex>$title</a></li>";
                 }
             }