Changeset 791
- Timestamp:
- 11/14/2007 04:38:28 PM (3 years ago)
- Files:
-
- 1 modified
-
branches/1.1.6.4/handlers/page/edit.php (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
branches/1.1.6.4/handlers/page/edit.php
r789 r791 253 253 // hence hsc_secure() instead of htmlspecialchars_ent() which UNescapes entities! 254 254 // JW/2007-02-20: why is this? wouldn't it be easier for the person editing to show actual characters instead of entities? 255 '<textarea id="body" name="body">'.$this->hsc_secure($body).'</textarea><br />'."\n"; #427 255 '<div id="textarea_container">'."\n". 256 '<textarea id="body" name="body">'.$this->hsc_secure($body).'</textarea>'."\n". #427 257 '</div>'."\n"; 256 258 // add Edit note 257 259 // We need to escape ALL entity refs before display so we display them _as_ entities instead of interpreting them