Show
Ignore:
Timestamp:
12/21/06 10:10:04 (2 years ago)
Author:
markjaquith
Message:

new function for escaping within attributes: attribute_escape()

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • branches/2.0/wp-admin/edit-page-form.php

    r4242 r4656  
    1515} 
    1616 
    17 $sendto = wp_get_referer(); 
     17$sendto = attribute_escape(wp_get_referer()); 
    1818 
    1919if ( 0 != $post_ID && $sendto == get_permalink($post_ID) ) 
    2020    $sendto = 'redo'; 
    21 $sendto = wp_specialchars( $sendto ); 
    2221 
    2322?>