Changeset 16431 for trunk/wp-includes/default-widgets.php

Timestamp:

11/17/2010 05:12:01 PM (14 years ago)

Author:

markjaquith

Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:

• trunk/wp-includes/default-widgets.php (modified) (1 diff)

trunk/wp-includes/default-widgets.php

@@ -400 +400 @@
         $instance = wp_parse_args( (array) $instance, array( 'title' => '', 'text' => '' ) );
         $title = strip_tags($instance['title']);
-        $text = format_to_edit($instance['text']);
+        $text = esc_textarea($instance['text']);
 ?>
         <p><label for="<?php echo $this->get_field_id('title'); ?>"><?php _e('Title:'); ?></label>