From 2a77fc75cd84268ee7fc51e38d6d53869dc154fb Mon Sep 17 00:00:00 2001
From: markjaquith <markjaquith@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Thu, 12 Nov 2009 02:37:28 +0000
Subject: [PATCH] Some extra XSS protection. Redundant, but we should always
 escape late! see #11119

git-svn-id: http://svn.automattic.com/wordpress/trunk@12169 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/press-this.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-admin/press-this.php b/wp-admin/press-this.php
index 30b1bf4778..f32d35a895 100644
--- a/wp-admin/press-this.php
+++ b/wp-admin/press-this.php
@@ -582,7 +582,7 @@ var photostorage = false;
 						echo '<p>';
 						if ( $selection )
 							_e('via ');
-						echo "<a href='$url'>$title</a>.</p>";
+						printf( "<a href='%s'>%s</a>.</p>", esc_url( $url ), esc_html( $title ) );
 					}
 				?></textarea>
 			</div>