Changeset 4656 for trunk/wp-admin/post.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/post.php (modified) (1 diff)

trunk/wp-admin/post.php

@@ -64 +64 @@
     <div id='preview' class='wrap'>
     <h2 id="preview-post"><?php _e('Post Preview (updated when post is saved)'); ?></h2>
-        <iframe src="<?php echo wp_specialchars(apply_filters('preview_post_link', add_query_arg('preview', 'true', get_permalink($post->ID)))); ?>" width="100%" height="600" ></iframe>
+        <iframe src="<?php echo attribute_escape(apply_filters('preview_post_link', add_query_arg('preview', 'true', get_permalink($post->ID)))); ?>" width="100%" height="600" ></iframe>
     </div>
     <?php