Make WordPress Core


Ignore:
Timestamp:
12/21/2006 10:10:04 AM (19 years ago)
Author:
markjaquith
Message:

new function for escaping within attributes: attribute_escape()

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.0/wp-includes/template-functions-category.php

    r4280 r4656  
    324324            $link = '<a href="'.get_category_link($category->cat_ID).'" ';
    325325            if ( $use_desc_for_title == 0 || empty($category->category_description) )
    326                 $link .= 'title="'. sprintf(__("View all posts filed under %s"), wp_specialchars($category->cat_name)) . '"';
     326                $link .= 'title="'. sprintf(__("View all posts filed under %s"), attribute_escape($category->cat_name)) . '"';
    327327            else
    328                 $link .= 'title="' . wp_specialchars(apply_filters('category_description',$category->category_description,$category)) . '"';
     328                $link .= 'title="' . attribute_escape(apply_filters('category_description',$category->category_description,$category)) . '"';
    329329            $link .= '>';
    330330            $link .= apply_filters('list_cats', $category->cat_name, $category).'</a>';
Note: See TracChangeset for help on using the changeset viewer.