Changeset 4656 for trunk/wp-admin/theme-editor.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/theme-editor.php (modified) (1 diff)

trunk/wp-admin/theme-editor.php

@@ -89 +89 @@
         if ($theme_name == $theme) $selected = " selected='selected'";
         else $selected = '';
-        $theme_name = wp_specialchars($theme_name, true);
+        $theme_name = attribute_escape($theme_name);
         echo "\n\t<option value=\"$theme_name\" $selected>$theme_name</option>";
     }