js_escape improvements from Alexander Concha. Catches &#39 &#039 ' ' ' &#X000027; &#x000027 etc.

git-svn-id: http://svn.automattic.com/wordpress/trunk@5734 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2007-06-19 22:46:55 +00:00 · 2007-06-19 22:46:55 +00:00 · 9d84bef608
parent fd5da3a85e
commit 9d84bef608
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/formatting.php
+++ b/wp-includes/formatting.php
@ -1105,7 +1105,7 @@ function htmlentities2($myHTML) {
 // Escape single quotes, specialchar double quotes, and fix line endings.
 function js_escape($text) {
 	$safe_text = wp_specialchars($text, 'double');
-	$safe_text = str_replace('&#039;', "'", $safe_text);
+	$safe_text = preg_replace('/&#(x)?0*(?(1)27|39);?/i', "'", stripslashes($safe_text));
 	$safe_text = preg_replace("/\r?\n/", "\\n", addslashes($safe_text));
 	return apply_filters('js_escape', $safe_text, $text);
 }