Changeset 37812
- Timestamp:
- 06/21/2016 02:53:46 PM (7 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/4.2/src/wp-admin/includes/post.php
r37776 r37812 1300 1300 } 1301 1301 1302 $post_name_html = '<span id="editable-post-name" title="' . $title . '">' . $post_name_abridged. '</span>';1303 $display_link = str_replace( array( '%pagename%', '%postname%' ), $post_name_html, urldecode( $permalink) );1302 $post_name_html = '<span id="editable-post-name" title="' . $title . '">' . esc_html( $post_name_abridged ) . '</span>'; 1303 $display_link = str_replace( array( '%pagename%', '%postname%' ), $post_name_html, esc_html( urldecode( $permalink ) ) ); 1304 1304 $pretty_permalink = str_replace( array( '%pagename%', '%postname%' ), $post_name, urldecode( $permalink ) ); 1305 1305 … … 1308 1308 $return .= '‎'; // Fix bi-directional text display defect in RTL languages. 1309 1309 $return .= '<span id="edit-slug-buttons"><a href="#post_name" class="edit-slug button button-small hide-if-no-js" onclick="editPermalink(' . $id . '); return false;">' . __( 'Edit' ) . "</a></span>\n"; 1310 $return .= '<span id="editable-post-name-full">' . $post_name. "</span>\n";1310 $return .= '<span id="editable-post-name-full">' . esc_html( $post_name ) . "</span>\n"; 1311 1311 } 1312 1312 … … 1322 1322 } 1323 1323 1324 $return .= "<span id='view-post-btn'><a href='" . $pretty_permalink. "' class='button button-small'>$view_post</a></span>\n";1324 $return .= "<span id='view-post-btn'><a href='" . esc_url( $pretty_permalink ) . "' class='button button-small'>$view_post</a></span>\n"; 1325 1325 } 1326 1326 }
Note: See TracChangeset
for help on using the changeset viewer.