Changeset 4656 for branches/2.0/wp-admin/theme-editor.php

Timestamp:

12/21/2006 10:10:04 AM (20 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/theme-editor.php (modified) (1 diff)

branches/2.0/wp-admin/theme-editor.php

@@ -102 +102 @@
                 if ($theme_name == $theme) $selected = " selected='selected'";
                 else $selected = '';
-                $theme_name = wp_specialchars($theme_name, true);
+                $theme_name = attribute_escape($theme_name);
                 echo "\n\t<option value=\"$theme_name\" $selected>$theme_name</option>";
         }