Pages are not sanitized in wp-admin/page.php

[xknown]

As a consequence of #4546, page contents are not sanitized in wp-admin/page.php, this bug is present in WP 2.3 and trunk (rev 6181).

Steps to reproduce the problem:

1. Create a new page with any title and some html.

   </textarea><script>alert(/Not escaped/)</script>
   

2. Press "Save and Continue Editing" button.

The attached patch adds sanitize_post to get_page function and also escapes post_title in parent_dropdown.

[xknown]

sanitize pages

[ryan]

(In [6184]) Add page sanitization. Props xknown. fixes #5135 for 2.3

[ryan]

(In [6185]) Add page sanitization. Props xknown. fixes #5135 for trunk