[wp-trac] [WordPress Trac] #24580: wp-admin/includes/media.php: edit_form_image_editor() missing esc_textarea() on Caption textarea.

[WordPress Trac]

#24580: wp-admin/includes/media.php: edit_form_image_editor() missing
esc_textarea() on Caption textarea.
----------------------------+------------------------------
 Reporter:  AlexanderOMara  |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  General         |     Version:  trunk
 Severity:  minor           |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------------------

Comment (by AlexanderOMara):

 Thanks toscho! This is the function I had intended to use, but somehow
 managed to type the wrong thing. I have replaced the diff file with the
 correct version and corrected the title, though a feature to correct the
 description eludes me.

 helem,
 {{{
 $post->post_excerpt
 }}}
 isn't escaped for me on a clean install of the latest trunk version.
 Entering {{{
 </textarea><textarea>
 }}} in the description field for an attachment results in a second
 textarea appearing.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24580#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software