Changeset 16031

Timestamp:

10/28/2010 06:30:59 AM (15 years ago)

Author:

nacin

Message:

Use esc_html. Ancient, deprecated functions, but a valid fix nonetheless. fixes #14199.

Location:

trunk/wp-includes

Files:

• functions.php (modified) (1 diff)
• rss.php (modified) (2 diffs)

trunk/wp-includes/functions.php

@@ -555 +555 @@
  * @subpackage Option
  * @since 1.0.0
- * @link http://alex.vort-x.net/blog/ Thanks Alex Stapleton
  *
  * @uses do_action() Calls 'add_option' hook before adding the option.

trunk/wp-includes/rss.php

@@ -892 +892 @@
                 esc_url( $item['link'] ),
                 esc_attr( strip_tags( $item['description'] ) ),
-                htmlentities( $item['title'] )
+                esc_html( $item['title'] )
             );
         }
@@ -927 +927 @@
             echo "<li>\n";
             echo "<a href='$item[link]' title='$item[description]'>";
-            echo htmlentities($item['title']);
+            echo esc_html($item['title']);
             echo "</a><br />\n";
             echo "</li>\n";