htmlspecialchars after apply_filters, props Viper007Bond, see #10858

git-svn-id: http://svn.automattic.com/wordpress/trunk@11983 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
azaozz 2009-09-29 10:28:08 +00:00
parent 856e319884
commit 111ffda455

View File

@ -2141,7 +2141,7 @@ function _wp_comment_row( $comment_id, $mode, $comment_status, $checkbox = true,
comment_text(); comment_text();
if ( $user_can ) { ?> if ( $user_can ) { ?>
<div id="inline-<?php echo $comment->comment_ID; ?>" class="hidden"> <div id="inline-<?php echo $comment->comment_ID; ?>" class="hidden">
<textarea class="comment" rows="1" cols="1"><?php echo apply_filters( 'comment_edit_pre', htmlspecialchars($comment->comment_content, ENT_QUOTES) ); ?></textarea> <textarea class="comment" rows="1" cols="1"><?php echo htmlspecialchars( apply_filters('comment_edit_pre', $comment->comment_content), ENT_QUOTES ); ?></textarea>
<div class="author-email"><?php echo esc_attr( $comment->comment_author_email ); ?></div> <div class="author-email"><?php echo esc_attr( $comment->comment_author_email ); ?></div>
<div class="author"><?php echo esc_attr( $comment->comment_author ); ?></div> <div class="author"><?php echo esc_attr( $comment->comment_author ); ?></div>
<div class="author-url"><?php echo esc_attr( $comment->comment_author_url ); ?></div> <div class="author-url"><?php echo esc_attr( $comment->comment_author_url ); ?></div>