WordPress.org

Make WordPress Core

Opened 16 years ago

Closed 15 years ago

#2507 closed defect (bug) (fixed)

_page_level_out does not use wp_specialchars

Reported by: hughbiquitous Owned by:
Milestone: Priority: normal
Severity: minor Version: 2.0.1
Component: General Keywords: bg|commit
Focuses: Cc:

Description

template-functions-post.php(419)

The title attribute of the A tag is properly escaped, but the link text isn't.

Just need to wrap wp_specialchars around the link text ($title).

Change History (2)

#1 @davidhouse
16 years ago

  • Keywords bg|commit added

#2 @markjaquith
15 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [4270]) run _page_level_out() link text through wp_specialchars(). Props to hughbiquitous. fixes #2507

Note: See TracTickets for help on using tickets.