Changeset 16431 for trunk/wp-admin/options.php

Timestamp:

11/17/2010 05:12:01 PM (14 years ago)

Author:

markjaquith

Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:

• trunk/wp-admin/options.php (modified) (1 diff)

trunk/wp-admin/options.php

@@ -202 +202 @@
 <td>";
     if ( strpos( $value, "\n" ) !== false )
-        echo "<textarea class='$class' name='$name' id='$name' cols='30' rows='5'>" . wp_htmledit_pre( $value ) . "</textarea>";
+        echo "<textarea class='$class' name='$name' id='$name' cols='30' rows='5'>" . esc_textarea( $value ) . "</textarea>";
     else
         echo "<input class='regular-text $class' type='text' name='$name' id='$name' value='" . esc_attr( $value ) . "'" . disabled( $disabled, true, false ) . " />";