From ca3cd51f8ee44903555da09af61fa5bbd13fdb4b Mon Sep 17 00:00:00 2001
From: Mark Jaquith <markjaquith@git.wordpress.org>
Date: Tue, 9 Sep 2008 19:08:22 +0000
Subject: [PATCH] Put aria-required in the proper place, and use
 htmlspecialchars for sanitizing textarea output. Props Mike Schinkel

git-svn-id: https://develop.svn.wordpress.org/trunk@8853 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/includes/media.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-admin/includes/media.php b/wp-admin/includes/media.php
index e839161a99..bb299236cc 100644
--- a/wp-admin/includes/media.php
+++ b/wp-admin/includes/media.php
@@ -878,7 +878,7 @@ function get_media_item( $attachment_id, $args = null ) {
 		if ( !empty($field[$field['input']]) )
 			$item .= $field[$field['input']];
 		elseif ( $field['input'] == 'textarea' ) {
-			$item .= "<textarea type='text' id='$name' name='$name'>" . attribute_escape( $field['value'] ) . $aria_required . "</textarea>";
+			$item .= "<textarea type='text' id='$name' name='$name'" . $aria_required . ">" . htmlspecialchars( $field['value'] ) . "</textarea>";
 		} else {
 			$item .= "<input type='text' id='$name' name='$name' value='" . attribute_escape( $field['value'] ) . "'" . $aria_required . "/>";
 		}