Changeset 4656 for trunk/wp-admin/edit-page-form.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/edit-page-form.php (modified) (1 diff)

trunk/wp-admin/edit-page-form.php

@@ -14 +14 @@
 }
 
-$sendto = wp_get_referer();
+$sendto = attribute_escape(stripslashes(wp_get_referer()));
 
 if ( 0 != $post_ID && $sendto == get_permalink($post_ID) )
     $sendto = 'redo';
-$sendto = wp_specialchars( $sendto );
-
 ?>