Changeset 45979 for trunk/src/js/_enqueues/wp/customize/nav-menus.js

Timestamp:

09/04/2019 05:11:22 PM (5 years ago)

Author:

whyisjake

Message:

Update wp.a11y.speak() to sanitize HTML before display.

Props iandunn, adamsilverstein, sstoqnov, peterwilsoncc

File:

• trunk/src/js/_enqueues/wp/customize/nav-menus.js (modified) (1 diff)

trunk/src/js/_enqueues/wp/customize/nav-menus.js

@@ -3457 +3457 @@
     function displayNavMenuName( name ) {
         name = name || '';
-        name = $( '<div>' ).text( name ).html(); // Emulate esc_html() which is used in wp-admin/nav-menus.php.
+        name = wp.sanitize.stripTagsAndEncodeText( name ); // Remove any potential tags from name.
         name = $.trim( name );
         return name || api.Menus.data.l10n.unnamed;