Changeset 4656 for branches/2.0/wp-admin/inline-uploading.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/inline-uploading.php (modified) (2 diffs)

branches/2.0/wp-admin/inline-uploading.php

@@ -241 +241 @@
             $ypadding = (96 - $image['uheight']) / 2;
             $style .= "#target{$ID} img { padding: {$ypadding}px {$xpadding}px; }\n";
-            $title = wp_specialchars($image['post_title'], ENT_QUOTES);
+            $title = attribute_escape($image['post_title']);
             $script .= "aa[{$ID}] = '<a id=\"p{$ID}\" rel=\"attachment\" class=\"imagelink\" href=\"$href\" onclick=\"doPopup({$ID});return false;\" title=\"{$title}\">';
 ab[{$ID}] = '<a class=\"imagelink\" href=\"{$image['guid']}\" onclick=\"doPopup({$ID});return false;\" title=\"{$title}\">';
@@ -261 +261 @@
 ";
         } else {
-            $title = wp_specialchars($attachment['post_title'], ENT_QUOTES);
+            $title = attribute_escape($attachment['post_title']);
             $filename = basename($attachment['guid']);
             $icon = get_attachment_icon($ID);