Properly escape the title in the feed widget, props nbachiyski, fixes #10378 for trunk
git-svn-id: http://svn.automattic.com/wordpress/trunk@11707 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
f0007384e4
commit
33a5d20b5c
|
@ -712,7 +712,7 @@ class WP_Widget_RSS extends WP_Widget {
|
||||||
if ( ! is_wp_error($rss) ) {
|
if ( ! is_wp_error($rss) ) {
|
||||||
$desc = esc_attr(strip_tags(@html_entity_decode($rss->get_description(), ENT_QUOTES, get_option('blog_charset'))));
|
$desc = esc_attr(strip_tags(@html_entity_decode($rss->get_description(), ENT_QUOTES, get_option('blog_charset'))));
|
||||||
if ( empty($title) )
|
if ( empty($title) )
|
||||||
$title = htmlentities(strip_tags($rss->get_title()));
|
$title = esc_html(strip_tags($rss->get_title()));
|
||||||
$link = esc_url(strip_tags($rss->get_permalink()));
|
$link = esc_url(strip_tags($rss->get_permalink()));
|
||||||
while ( stristr($link, 'http') != $link )
|
while ( stristr($link, 'http') != $link )
|
||||||
$link = substr($link, 1);
|
$link = substr($link, 1);
|
||||||
|
|
Loading…
Reference in New Issue