Treat those chars specially, and sanitize inline-uploading params

git-svn-id: http://svn.automattic.com/wordpress/branches/2.0@4416 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2006-10-23 05:54:54 +00:00
parent fde479b704
commit 22a0270310
2 changed files with 3 additions and 1 deletions

View File

@ -24,6 +24,8 @@ for ($i=0; $i<count($wpvarstoreset); $i += 1) {
}
}
$all = ( 'true' == $all ) ? 'true' : 'false';
$start = (int) $start;
$post = (int) $post;
$images_width = 1;

View File

@ -111,7 +111,7 @@ if ( $recents ) :
<?php
echo '<ol>';
foreach ($recents as $recent) :
echo "<li><a href='templates.php?file=$recent'>" . get_file_description(basename($recent)) . "</a></li>";
echo "<li><a href='templates.php?file=" . wp_specialchars($recent, true) . "'>" . get_file_description(basename($recent)) . "</a></li>";
endforeach;
echo '</ol>';
endif;