Changeset 16431 for trunk/wp-admin/includes/class-wp-comments-list-table.php

Timestamp:

11/17/2010 05:12:01 PM (14 years ago)

Author:

markjaquith

Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:

• trunk/wp-admin/includes/class-wp-comments-list-table.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-comments-list-table.php

@@ -351 +351 @@
         if ( $user_can ) { ?>
         <div id="inline-<?php echo $comment->comment_ID; ?>" class="hidden">
-        <textarea class="comment" rows="1" cols="1"><?php echo esc_html( apply_filters( 'comment_edit_pre', $comment->comment_content ) ); ?></textarea>
+        <textarea class="comment" rows="1" cols="1"><?php echo esc_textarea( apply_filters( 'comment_edit_pre', $comment->comment_content ) ); ?></textarea>
         <div class="author-email"><?php echo esc_attr( $comment->comment_author_email ); ?></div>
         <div class="author"><?php echo esc_attr( $comment->comment_author ); ?></div>