Commit 4c66ab52 authored by Steven Wittens's avatar Steven Wittens
Browse files

- #31301: Don't escape apostrophes in XML-RPC strings.

/me looks down
OH MY GOD... I'M MELLLLTTIIINNGG NOOOOOOO.... AAARGHHHHHH.

Oh well, don't the people inside the asylum say the outside world is insane, too?
parent eaa244d3
...@@ -82,7 +82,9 @@ function xmlrpc_value_get_xml($xmlrpc_value) { ...@@ -82,7 +82,9 @@ function xmlrpc_value_get_xml($xmlrpc_value) {
return '<double>'. $xmlrpc_value->data .'</double>'; return '<double>'. $xmlrpc_value->data .'</double>';
break; break;
case 'string': case 'string':
return '<string>'. check_plain($xmlrpc_value->data) .'</string>'; // Note: we don't escape apostrophes because of the many blogging clients
// that don't support numerical entities (and XML in general) properly.
return '<string>'. htmlspecialchars($xmlrpc_value->data) .'</string>';
break; break;
case 'array': case 'array':
$return = '<array><data>'."\n"; $return = '<array><data>'."\n";
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment