Escape caption in [gallery] output, props MattyRob, fixes #8763

git-svn-id: http://svn.automattic.com/wordpress/trunk@11200 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-05-05 07:35:03 +00:00 · 2009-05-05 07:35:03 +00:00 · 62b2e5e278
parent 28ee4bf382
commit 62b2e5e278
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/media.php
+++ b/wp-includes/media.php
@ -684,7 +684,7 @@ function gallery_shortcode($attr) {
 		if ( $captiontag && trim($attachment->post_excerpt) ) {
 			$output .= "
 				<{$captiontag} class='gallery-caption'>
-				{$attachment->post_excerpt}
+				" . wp_specialchars($attachment->post_excerpt) . "
 				</{$captiontag}>";
 		}
 		$output .= "</{$itemtag}>";