Ticket #2507 (closed defect: fixed)

Opened 3 years ago

Last modified 2 years ago

_page_level_out does not use wp_specialchars

Reported by: hughbiquitous Assigned to: anonymous
Priority: normal Milestone:
Component: General Version: 2.0.1
Severity: minor Keywords: bg|commit
Cc:

Description

template-functions-post.php(419)

The title attribute of the A tag is properly escaped, but the link text isn't.

Just need to wrap wp_specialchars around the link text ($title).

Change History

02/28/06 09:37:48 changed by davidhouse

  • keywords set to bg|commit.

10/02/06 21:07:44 changed by markjaquith

  • status changed from new to closed.
  • resolution set to fixed.

(In [4270]) run _page_level_out() link text through wp_specialchars(). Props to hughbiquitous. fixes #2507