Bad quote escaping in media uploader?

[Otto42]

Report and fix here:
​http://wordpress.org/support/topic/164563/page/2?replies=50#post-737670

Other people report the same issue and that the fix works too.

Short version:
wp-admin/includes/media.php, line 57

$html = "<a href='".attribute_escape($url)."'$rel>$html</a>";

Should be this:

$html = "<a href=\"".attribute_escape($url)."\"$rel>$html</a>";

Because the single quote there can hork up some javascript code that it gets inserted into.

[ryan]

(In [7874]) Fix send_to_editor escaping. Props Glotzfisch. fixes #6898 for trunk

[ryan]

(In [7875]) Fix send_to_editor escaping. Props Glotzfisch. fixes #6898 for 2.5

[ryan]

Milestone 2.5.2 deleted