Changeset 1016

Timestamp:

12/02/2014 07:58:01 PM (12 years ago)

Author:

coffee2code

Message:

developer.wordpress.org: convert all applicable characters to HTML entities prior to appearing in the "Default value:" section of a parameter

Markup and special characters used in default values should be displayed, not interpreted.

Location:

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-developer

Files:

• content-reference.php (modified) (1 diff)
• content-wp-parser-hook.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-developer/content-reference.php

@@ -80 +80 @@
                                 </p>
                                 <?php if ( ! empty( $param['default'] ) ) : ?>
-                                <p class="default"><?php _e( 'Default value:', 'wporg' );?> <?php echo esc_html( $param['default'] ); ?></p>
+                                <p class="default"><?php _e( 'Default value:', 'wporg' );?> <?php echo htmlentities( $param['default'] ); ?></p>
                                 <?php endif; ?>
                         </dd>

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-developer/content-wp-parser-hook.php

@@ -78 +78 @@
 
                                                         <?php if ( ! empty( $param['default'] ) ) : ?>
-                                                                <p class="default"><?php _e( 'Default value:', 'wporg' );?> <?php echo esc_html( $param['default'] ); ?></p>
+                                                                <p class="default"><?php _e( 'Default value:', 'wporg' );?> <?php echo htmlentities( $param['default'] ); ?></p>
                                                         <?php endif; ?>
                                                 </dd>