Changeset 35760 for trunk/src/wp-admin/includes/ajax-actions.php

Timestamp:

12/03/2015 05:16:57 PM (9 years ago)

Author:

helen

Message:

Media: Avoid rel="rel=" situations.

props lucymtc, swissspidy.
fixes #34826. see #32074.

File:

• trunk/src/wp-admin/includes/ajax-actions.php (modified) (2 diffs)

trunk/src/wp-admin/includes/ajax-actions.php

@@ -2571 +2571 @@
     $url = empty( $attachment['url'] ) ? '' : $attachment['url'];
     if ( strpos( $url, 'attachment_id') || get_attachment_link( $id ) == $url ) {
-        $rel = ' rel="attachment wp-att-' . $id . '"';
+        $rel = 'attachment wp-att-' . $id;
     }
 
@@ -2594 +2594 @@
         $html = isset( $attachment['post_title'] ) ? $attachment['post_title'] : '';
         if ( ! empty( $url ) ) {
-            $html = '<a href="' . esc_url( $url ) . '"' . $rel . '>' . $html . '</a>';
+            $html = '<a href="' . esc_url( $url ) . '"' . 'rel="' . esc_attr( $rel ) . '">' . $html . '</a>';
         }
     }