WordPress.org

Make WordPress Core

Changeset 4986


Ignore:
Timestamp:
03/07/2007 04:29:45 AM (11 years ago)
Author:
ryan
Message:

attribute_escape content before stuffing it in value attribute. Props Dan Coulter. fixes #3919

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/upload-functions.php

    r4953 r4986  
    1919        $post_title = attribute_escape(ob_get_contents());
    2020    ob_end_clean();
    21     $post_content = apply_filters( 'content_edit_pre', $post->post_content );
     21    $post_content = attribute_escape(apply_filters( 'content_edit_pre', $post->post_content ));
    2222
    2323    $class = 'text';
Note: See TracChangeset for help on using the changeset viewer.