Changeset 35341 for trunk/src/wp-includes/media-template.php

Timestamp:

10/21/2015 08:37:54 PM (11 years ago)

Author:

azaozz

Message:

TinyMCE:

• Sanitize and render HTML in captions when showing a gallery preview (wpView).
• Encode/escape HTML entered in the text field in the wpLink dialog.

Props iseulde, kraftbj, jnylen0, shawarkhan.
Fixes #32616.

File:

• trunk/src/wp-includes/media-template.php (modified) (1 diff)

trunk/src/wp-includes/media-template.php

@@ -1217 +1217 @@
                         <# if ( attachment.caption ) { #>
                             <dd class="wp-caption-text gallery-caption">
-                                {{ attachment.caption }}
+                                {{{ data.verifyHTML( attachment.caption ) }}}
                             </dd>
                         <# } #>