Make WordPress Core


Ignore:
Timestamp:
11/28/2006 09:51:13 PM (17 years ago)
Author:
ryan
Message:

Use js_escape. Props nbachiyski. fixes #3399

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/edit-page-form.php

    r4495 r4535  
    189189    $delete_nonce = wp_create_nonce( 'delete-page_' . $post_ID );
    190190    if ( current_user_can('delete_page', $post->ID) ) ?>
    191         <input name="deletepost" class="button delete" type="submit" id="deletepost" tabindex="10" value="<?php _e('Delete this page') ?>" <?php echo "onclick=\"if ( confirm('" . sprintf(__("You are about to delete this page \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), js_escape($post->post_title) ) . "') ) { document.forms.post._wpnonce.value = '$delete_nonce'; return true;}return false;\""; ?> />
     191        <input name="deletepost" class="button delete" type="submit" id="deletepost" tabindex="10" value="<?php _e('Delete this page') ?>" <?php echo "onclick=\"if ( confirm('" . js_escape(sprintf(__("You are about to delete this page \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), $post->post_title )) . "') ) { document.forms.post._wpnonce.value = '$delete_nonce'; return true;}return false;\""; ?> />
    192192<?php endif; ?>
    193193</div>
Note: See TracChangeset for help on using the changeset viewer.