Changeset 4656 for trunk/wp-admin/templates.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/templates.php (modified) (1 diff)

trunk/wp-admin/templates.php

@@ -99 +99 @@
 echo '<ol>';
 foreach ($recents as $recent) :
-    echo "<li><a href='templates.php?file=" . wp_specialchars($recent, true) . "'>" . get_file_description(basename($recent)) . "</a></li>";
+    echo "<li><a href='templates.php?file=" . attribute_escape($recent) . "'>" . get_file_description(basename($recent)) . "</a></li>";
 endforeach;
 echo '</ol>';