Changeset 4656 for trunk/wp-admin/bookmarklet.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/bookmarklet.php (modified) (1 diff)

trunk/wp-admin/bookmarklet.php

@@ -38 +38 @@
 
 $content  = wp_specialchars($_REQUEST['content']);
-$popupurl = wp_specialchars($_REQUEST['popupurl']);
+$popupurl = attribute_escape($_REQUEST['popupurl']);
 if ( !empty($content) ) {
     $post->post_content = wp_specialchars( stripslashes($_REQUEST['content']) );