Changeset 19275

Timestamp:

11/14/2011 07:35:32 PM (13 years ago)

Author:

azaozz

Message:

Filter the link href when inserting external image in the editor, props DrewAPicture, fixes #18445

File:

• trunk/wp-admin/includes/media.php (modified) (1 diff)

trunk/wp-admin/includes/media.php

@@ -1498 +1498 @@
         html = '<img alt="'+alt+'" src="'+f.src.value+'"'+title+cls+' width="'+t.width+'" height="'+t.height+'" />';
 
-        if ( f.url.value )
-            html = '<a href="'+f.url.value+'">'+html+'</a>';
+        if ( f.url.value ) {
+            url = f.url.value.replace(/'/g, '&#039;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+            html = '<a href="'+url+'">'+html+'</a>';
+        }
 
         if ( caption )