Changeset 4656 for trunk/wp-includes/post-template.php

Timestamp:

12/21/2006 10:10:04 AM (20 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-includes/post-template.php (modified) (3 diffs)

trunk/wp-includes/post-template.php

@@ -335 +335 @@
                 return __('Missing Attachment');
 
-        $post_title = wp_specialchars( $_post->post_title, 1 );
+        $post_title = attribute_escape( $_post->post_title);
 
         if (! empty($_post->guid) ) {
@@ -421 +421 @@
         }
 
-        $post_title = wp_specialchars( $post->post_title, 1 );
+        $post_title = attribute_escape( $post->post_title);
 
         $icon = "<img src='$src' title='$post_title' alt='$post_title' $constraint/>";
@@ -436 +436 @@
         $post = & get_post($id);
 
-        $innerHTML = wp_specialchars( $post->post_title, 1 );
+        $innerHTML = attribute_escape( $post->post_title);
 
         return apply_filters('attachment_innerHTML', $innerHTML, $post->ID);