Changeset 1497 for trunk/wp-includes/template-functions-general.php

Timestamp:

07/28/2004 11:09:33 PM (21 years ago)

Author:

rboren

Message:

Run htmlspecialchars on title attribute text in get_archives_link(). Bug 0000162.

File:

• trunk/wp-includes/template-functions-general.php (modified) (1 diff)

trunk/wp-includes/template-functions-general.php

@@ -195 +195 @@
 function get_archives_link($url, $text, $format = 'html', $before = '', $after = '') {
     $text = wptexturize($text);
+    $title_text = htmlspecialchars($text);
+
     if ('link' == $format) {
-        return "\t<link rel='archives' title='$text' href='$url' />\n";
+        return "\t<link rel='archives' title='$title_text' href='$url' />\n";
     } elseif ('option' == $format) {
         return "\t<option value='$url'>$text</option>\n";
     } elseif ('html' == $format) {
-        return "\t<li>$before<a href='$url' title='$text'>$text</a>$after</li>\n";
+        return "\t<li>$before<a href='$url' title='$title_text'>$text</a>$after</li>\n";
     } else { // custom
-        return "\t$before<a href='$url' title='$text'>$text</a>$after\n";
+        return "\t$before<a href='$url' title='$title_text'>$text</a>$after\n";
     }
 }