Changeset 19081

Timestamp:

10/28/2011 10:40:09 PM (13 years ago)

Author:

nacin

Message:

Use esc_attr() consistently in wp_dropdown_pages().

File:

• trunk/wp-includes/post-template.php (modified) (2 diffs)

trunk/wp-includes/post-template.php

@@ -779 +779 @@
     $pages = get_pages($r);
     $output = '';
-    $name = esc_attr($name);
     // Back-compat with old system where both id and name were based on $name argument
     if ( empty($id) )
@@ -785 +784 @@
 
     if ( ! empty($pages) ) {
-        $output = "<select name=\"$name\" id=\"$id\">\n";
+        $output = "<select name='" . esc_attr( $name ) . "' id='" . esc_attr( $id ) . "'>\n";
         if ( $show_option_no_change )
             $output .= "\t<option value=\"-1\">$show_option_no_change</option>";