Changeset 4656 for branches/2.0/wp-admin/edit-page-form.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/edit-page-form.php (modified) (1 diff)

branches/2.0/wp-admin/edit-page-form.php

@@ -15 +15 @@
 }
 
-$sendto = wp_get_referer();
+$sendto = attribute_escape(wp_get_referer());
 
 if ( 0 != $post_ID && $sendto == get_permalink($post_ID) )
     $sendto = 'redo';
-$sendto = wp_specialchars( $sendto );
 
 ?>