WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

escape hrefs. Props Denis-de-Bernardy. fixes #10056 for 2.8 

git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@12296 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2009-11-30 17:08:36 +00:00
parent a82a086221
commit 9824ba235f
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
wp-admin/includes/media.php
View File

@ -477,8 +477,8 @@ function media_upload_image() {
$class = " class='align$align'";
}
if ( !empty($src) )
$html = "<img src='$src' alt='$alt'$class />";
$html = apply_filters('image_send_to_editor_url', $html, $src, $alt, $align);
$html = "<img src='" . esc_url($src) . "' alt='$alt'$class />";
$html = apply_filters('image_send_to_editor_url', $html, esc_url_raw($src), $alt, $align);
return media_send_to_editor($html);
}
@ -569,8 +569,8 @@ function media_upload_audio() {
if ( empty($title) )
$title = basename($href);
if ( !empty($title) && !empty($href) )
$html = "<a href='$href' >$title</a>";
$html = apply_filters('audio_send_to_editor_url', $html, $href, $title);
$html = "<a href='" . esc_url($href) . "' >$title</a>";
$html = apply_filters('audio_send_to_editor_url', $html, esc_url_raw($href), $title);
return media_send_to_editor($html);
}
@ -623,8 +623,8 @@ function media_upload_video() {
if ( empty($title) )
$title = basename($href);
if ( !empty($title) && !empty($href) )
$html = "<a href='$href' >$title</a>";
$html = apply_filters('video_send_to_editor_url', $html, $href, $title);
$html = "<a href='" . esc_url($href) . "' >$title</a>";
$html = apply_filters('video_send_to_editor_url', $html, esc_url_raw($href), $title);
return media_send_to_editor($html);
}
@ -677,8 +677,8 @@ function media_upload_file() {
if ( empty($title) )
$title = basename($href);
if ( !empty($title) && !empty($href) )
$html = "<a href='$href' >$title</a>";
$html = apply_filters('file_send_to_editor_url', $html, $href, $title);
$html = "<a href='" . esc_url($href) . "' >$title</a>";
$html = apply_filters('file_send_to_editor_url', $html, esc_url_raw($href), $title);
return media_send_to_editor($html);
}