Ticket #6449: 6449.patch

wp-includes/formatting.php

@@ -1132 +1132 @@
-        $output = str_replace('<', '<', $output);
-        $output = str_replace('>', '>', $output);
-
+        // These should be entities too
+        $output = str_replace('<', '&lt;', $output);
+        $output = str_replace('>', '&gt;', $output);
+        
-        return apply_filters('richedit_pre', $output);
-}
-