WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use esc_html. Ancient, deprecated functions, but a valid fix nonetheless. fixes #14199. 

git-svn-id: http://svn.automattic.com/wordpress/trunk@16031 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
nacin 2010-10-28 06:30:59 +00:00
parent df7f5821db
commit 7c92b4ca0d
2 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
wp-includes/functions.php
View File

@ -554,7 +554,6 @@ function update_option( $option, $newvalue ) {
* @package WordPress
* @subpackage Option
* @since 1.0.0
* @link http://alex.vort-x.net/blog/ Thanks Alex Stapleton
*
* @uses do_action() Calls 'add_option' hook before adding the option.
* @uses do_action() Calls 'add_option_$option' and 'added_option' hooks on success.

4
wp-includes/rss.php
View File

@ -891,7 +891,7 @@ function wp_rss( $url, $num_items = -1 ) {
'<li><a href="%1$s" title="%2$s">%3$s</a></li>',
esc_url( $item['link'] ),
esc_attr( strip_tags( $item['description'] ) ),
htmlentities( $item['title'] )
esc_html( $item['title'] )
);
}
@ -926,7 +926,7 @@ function get_rss ($url, $num_items = 5) { // Like get posts, but for RSS
foreach ( (array) $rss->items as $item ) {
echo "<li>\n";
echo "<a href='$item[link]' title='$item[description]'>";
echo htmlentities($item['title']);
echo esc_html($item['title']);
echo "</a><br />\n";
echo "</li>\n";
}