Covering our XSS bases

git-svn-id: http://svn.automattic.com/wordpress/trunk@9233 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-10-17 20:06:22 +00:00
parent 61f911c42e
commit 4d2d655490
31 changed files with 31 additions and 31 deletions
@@ -457,7 +457,7 @@ endif;
 <?php endif; ?>

 <div class="wrap">
-<h2><?php echo $title ?></h2>
+<h2><?php echo wp_specialchars( $title ); ?></h2>
 <form name="post" action="post.php" method="post" id="post">
 <?php