Changeset 4656 for trunk/wp-includes/post-template.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-includes/post-template.php (modified) (3 diffs)

trunk/wp-includes/post-template.php

@@ -335 +335 @@
         return __('Missing Attachment');
 
-    $post_title = wp_specialchars( $_post->post_title, 1 );
+    $post_title = attribute_escape( $_post->post_title);
 
     if (! empty($_post->guid) ) {
@@ -421 +421 @@
     }
 
-    $post_title = wp_specialchars( $post->post_title, 1 );
+    $post_title = attribute_escape( $post->post_title);
 
     $icon = "<img src='$src' title='$post_title' alt='$post_title' $constraint/>";
@@ -436 +436 @@
     $post = & get_post($id);
 
-    $innerHTML = wp_specialchars( $post->post_title, 1 );
+    $innerHTML = attribute_escape( $post->post_title);
 
     return apply_filters('attachment_innerHTML', $innerHTML, $post->ID);