Changeset 5736

Timestamp:

06/20/2007 07:13:29 PM (18 years ago)

Author:

markjaquith

Message:

js_escape improvements from Alexander Concha. Catches &#39 &#039 ' ' ' ' &#x000027 etc. for 2.0.x

File:

• branches/2.0/wp-includes/functions-formatting.php (modified) (1 diff)

branches/2.0/wp-includes/functions-formatting.php

@@ -1068 +1068 @@
 function js_escape($text) {
     $safe_text = wp_specialchars($text, 'double');
-    $safe_text = str_replace(''', "'", $safe_text);
+    $safe_text = preg_replace('/&#(x)?0*(?(1)27|39);?/i', "'", stripslashes($safe_text));
     $safe_text = preg_replace("/\r?\n/", "\\n", addslashes($safe_text));
     return apply_filters('js_escape', $safe_text, $text);