id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc
20771,esc_url() instead of esc_html() in wp_nonce_url(),jkudish,SergeyBiryukov,"The `wp_nonce_url()` function currently uses `esc_html()` in its output, which doesn't really seem to be the appropriate escaping function since it's generating a URL.

Attached patch changes the output to use `esc_url()`",enhancement,reopened,normal,Future Release,Formatting,3.4,normal,,has-patch dev-feedback 3.6-early commit,