Changeset 32175 for trunk/src/wp-admin/includes/template.php

Timestamp:

04/20/2015 07:38:29 AM (10 years ago)

Author:

pento

Message:

Ensure post titles are correctly escaped on the Dashboard.

Props helen, ocean90, dd32, pento.

File:

• trunk/src/wp-admin/includes/template.php (modified) (1 diff)

trunk/src/wp-admin/includes/template.php

@@ -1557 +1557 @@
     if ( empty( $title ) )
         $title = __( '(no title)' );
-    return $title;
+    return esc_html( $title );
 }