WordPress.org

Make WordPress Core


Ignore:
Timestamp:
11/17/2010 05:12:01 PM (11 years ago)
Author:
markjaquith
Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/options.php

    r16061 r16431  
    202202<td>";
    203203    if ( strpos( $value, "\n" ) !== false )
    204         echo "<textarea class='$class' name='$name' id='$name' cols='30' rows='5'>" . wp_htmledit_pre( $value ) . "</textarea>";
     204        echo "<textarea class='$class' name='$name' id='$name' cols='30' rows='5'>" . esc_textarea( $value ) . "</textarea>";
    205205    else
    206206        echo "<input class='regular-text $class' type='text' name='$name' id='$name' value='" . esc_attr( $value ) . "'" . disabled( $disabled, true, false ) . " />";
Note: See TracChangeset for help on using the changeset viewer.