Changeset 4986

Timestamp:

03/07/2007 04:29:45 AM (20 years ago)

Author:

ryan

Message:

attribute_escape content before stuffing it in value attribute. Props Dan Coulter. fixes #3919

File:

• trunk/wp-admin/upload-functions.php (modified) (1 diff)

trunk/wp-admin/upload-functions.php

@@ -19 +19 @@
                 $post_title = attribute_escape(ob_get_contents());
         ob_end_clean();
-        $post_content = apply_filters( 'content_edit_pre', $post->post_content );
+        $post_content = attribute_escape(apply_filters( 'content_edit_pre', $post->post_content ));
 
         $class = 'text';