Index: /branches/4.3/src/wp-admin/includes/post.php
===================================================================
--- /branches/4.3/src/wp-admin/includes/post.php (revision 37810)
+++ /branches/4.3/src/wp-admin/includes/post.php (revision 37811)
@@ -1314,6 +1314,6 @@
}
- $post_name_html = '' . $post_name_abridged . '';
- $display_link = str_replace( array( '%pagename%', '%postname%' ), $post_name_html, urldecode( $permalink ) );
+ $post_name_html = '' . esc_html( $post_name_abridged ) . '';
+ $display_link = str_replace( array( '%pagename%', '%postname%' ), $post_name_html, esc_html( urldecode( $permalink ) ) );
$pretty_permalink = str_replace( array( '%pagename%', '%postname%' ), $post_name, urldecode( $permalink ) );
@@ -1322,5 +1322,5 @@
$return .= ''; // Fix bi-directional text display defect in RTL languages.
$return .= '' . __( 'Edit' ) . "\n";
- $return .= '' . $post_name . "\n";
+ $return .= '' . esc_html( $post_name ) . "\n";
}
@@ -1336,5 +1336,5 @@
}
- $return .= "$view_post\n";
+ $return .= "$view_post\n";
}
}