Make WordPress Core


Ignore:
Timestamp:
10/12/2015 10:51:32 PM (8 years ago)
Author:
johnbillion
Message:

Correct two escaping functions used in wp-includes/embed-template.php.

See #32522

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/embed-template.php

    r35085 r35086  
    201201                        </div>
    202202                        <div id="wp-embed-share-tab-html" class="wp-embed-share-tab" role="tabpanel" aria-labelledby="wp-embed-share-tab-button-html" aria-hidden="true">
    203                             <textarea class="wp-embed-share-input" tabindex="0" readonly><?php echo esc_attr( get_post_embed_html( null, 600, 400 ) ); ?></textarea>
     203                            <textarea class="wp-embed-share-input" tabindex="0" readonly><?php echo esc_textarea( get_post_embed_html( null, 600, 400 ) ); ?></textarea>
    204204
    205205                            <p class="wp-embed-share-description">
     
    248248                    esc_url( home_url() ),
    249249                    esc_url( $site_icon_url ),
    250                     esc_attr( get_bloginfo( 'name' ) )
     250                    esc_html( get_bloginfo( 'name' ) )
    251251                );
    252252                ?>
Note: See TracChangeset for help on using the changeset viewer.