Changeset 16431 for trunk/wp-admin/user-edit.php

Timestamp:

11/17/2010 05:12:01 PM (15 years ago)

Author:

markjaquith

Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:

• trunk/wp-admin/user-edit.php (modified) (1 diff)

trunk/wp-admin/user-edit.php

@@ -341 +341 @@
 <tr>
     <th><label for="description"><?php _e('Biographical Info'); ?></label></th>
-    <td><textarea name="description" id="description" rows="5" cols="30"><?php echo esc_html($profileuser->description); ?></textarea><br />
+    <td><textarea name="description" id="description" rows="5" cols="30"><?php echo esc_textarea( $profileuser->description ); ?></textarea><br />
     <span class="description"><?php _e('Share a little biographical information to fill out your profile. This may be shown publicly.'); ?></span></td>
 </tr>