Changeset 16431 for trunk/wp-includes/post.php

Timestamp:

11/17/2010 05:12:01 PM (14 years ago)

Author:

markjaquith

Message:

esc_textarea() and application for obvious textarea escaping. props alexkingorg. fixes #15454

File:

• trunk/wp-includes/post.php (modified) (1 diff)

trunk/wp-includes/post.php

@@ -5124 +5124 @@
             'output' => '<h4 id="%s-content-label"><label for="content">'. __('Content') .'</label></h4>
         <div class="textarea-wrap">
-            <textarea name="content" id="%s-content" class="mceEditor" rows="3" cols="15" tabindex="%d">'. $post->post_content.'</textarea>
+            <textarea name="content" id="%s-content" class="mceEditor" rows="3" cols="15" tabindex="%d">'. esc_textarea( $post->post_content ) .'</textarea>
         </div>
             '."     <script type='text/javascript'>edCanvas = document.getElementById('content');edInsertContent = null;</script>