Changeset 8853

Show
Ignore:
Timestamp:
09/09/08 19:08:22 (3 months ago)
Author:
markjaquith
Message:

Put aria-required in the proper place, and use htmlspecialchars for sanitizing textarea output. Props Mike Schinkel

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-admin/includes/media.php

    r8827 r8853  
    879879            $item .= $field[$field['input']]; 
    880880        elseif ( $field['input'] == 'textarea' ) { 
    881             $item .= "<textarea type='text' id='$name' name='$name'>" . attribute_escape( $field['value'] ) . $aria_required . "</textarea>"; 
     881            $item .= "<textarea type='text' id='$name' name='$name'" . $aria_required . ">" . htmlspecialchars( $field['value'] ) . "</textarea>"; 
    882882        } else { 
    883883            $item .= "<input type='text' id='$name' name='$name' value='" . attribute_escape( $field['value'] ) . "'" . $aria_required . "/>";