Changeset 16993

Timestamp:

12/16/2010 09:24:22 AM (14 years ago)

Author:

markjaquith

Message:

Use ENT_QUOTES in esc_textarea() in case someone uses it in a value= situation by accident. see #15454

File:

• trunk/wp-includes/formatting.php (modified) (1 diff)

trunk/wp-includes/formatting.php

@@ -2369 +2369 @@
  */
 function esc_textarea( $text ) {
-    $safe_text = htmlspecialchars( $text );
+    $safe_text = htmlspecialchars( $text, ENT_QUOTES );
     return apply_filters( 'esc_textarea', $safe_text, $text );
 }