From 687c69d0090420583242295213137470ebfd6d67 Mon Sep 17 00:00:00 2001 From: ryan Date: Sat, 5 Feb 2011 18:26:46 +0000 Subject: [PATCH] Properly encode the post title. Props koopersmith, nacin. For trunk git-svn-id: http://svn.automattic.com/wordpress/trunk@17395 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/includes/template.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-admin/includes/template.php b/wp-admin/includes/template.php index d9790bef47..622aa2ecbc 100644 --- a/wp-admin/includes/template.php +++ b/wp-admin/includes/template.php @@ -270,7 +270,7 @@ function get_inline_data($post) { if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) ) return; - $title = esc_attr( trim( $post->post_title ) ); + $title = htmlspecialchars( trim( $post->post_title ), ENT_QUOTES ); echo '