From 4d6fcfdba1a484d5c8c9e5d64e5992b84256507c Mon Sep 17 00:00:00 2001
From: Andrew Nacin <wp@andrewnacin.com>
Date: Tue, 8 Apr 2014 17:40:14 +0000
Subject: [PATCH] Escape playlist data in templates.

props wonderboymusic.
fixes #27710.

Built from https://develop.svn.wordpress.org/trunk@28050


git-svn-id: http://core.svn.wordpress.org/trunk@27880 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/media.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/wp-includes/media.php b/wp-includes/media.php
index fe09a947ae..7feccd00c3 100644
--- a/wp-includes/media.php
+++ b/wp-includes/media.php
@@ -1020,7 +1020,7 @@ function wp_underscore_playlist_templates() {
 	<img src="{{ data.thumb.src }}"/>
 	<# } #>
 	<div class="wp-playlist-caption">
-		<span class="wp-playlist-item-meta wp-playlist-item-title">&#8220;{{{ data.title }}}&#8221;</span>
+		<span class="wp-playlist-item-meta wp-playlist-item-title">&#8220;{{ data.title }}&#8221;</span>
 		<# if ( data.meta.album ) { #><span class="wp-playlist-item-meta wp-playlist-item-album">{{ data.meta.album }}</span><# } #>
 		<# if ( data.meta.artist ) { #><span class="wp-playlist-item-meta wp-playlist-item-artist">{{ data.meta.artist }}</span><# } #>
 	</div>
@@ -1194,9 +1194,9 @@ function wp_playlist_shortcode( $attr ) {
 		$track = array(
 			'src' => $url,
 			'type' => $ftype['type'],
-			'title' => get_the_title( $attachment->ID ),
-			'caption' => wptexturize( $attachment->post_excerpt ),
-			'description' => wptexturize( $attachment->post_content )
+			'title' => $attachment->post_title,
+			'caption' => $attachment->post_excerpt,
+			'description' => $attachment->post_content
 		);
 
 		$track['meta'] = array();