Changeset 37220

Timestamp:

04/16/2016 02:51:01 PM (9 years ago)

Author:

boonebgorges

Message:

In sanitize_post_field(), only run 'attribute' or 'js' escaping when necessary.

Props tfrommen.
Fixes #34900.

File:

• trunk/src/wp-includes/post.php (modified) (1 diff)

trunk/src/wp-includes/post.php

@@ -2140 +2140 @@
             $value = apply_filters( "post_{$field}", $value, $post_id, $context );
         }
-    }
-
-    if ( 'attribute' == $context )
-        $value = esc_attr($value);
-    elseif ( 'js' == $context )
-        $value = esc_js($value);
+
+        if ( 'attribute' == $context ) {
+            $value = esc_attr( $value );
+        } elseif ( 'js' == $context ) {
+            $value = esc_js( $value );
+        }
+    }
 
     return $value;