Changeset 4656 for branches/2.0/wp-admin/bookmarklet.php

Timestamp:

12/21/2006 10:10:04 AM (18 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/bookmarklet.php (modified) (1 diff)

branches/2.0/wp-admin/bookmarklet.php

@@ -38 +38 @@
   
 $content  = wp_specialchars($_REQUEST['content']);
-$popupurl = wp_specialchars($_REQUEST['popupurl']);
+$popupurl = attribute_escape(stripslashes($_REQUEST['popupurl']));
     if ( !empty($content) ) {
         $post->post_content = wp_specialchars( stripslashes($_REQUEST['content']) );