Ticket #11011: press-this-esc-fix-10-26.patch

wp-admin/press-this.php

@@ -212 +212 @@
                                                 $src = 'http://'.str_replace('//','/', $host['host'].'/'.$src);
                                         else
                                                 $src = 'http://'.str_replace('//','/', $host['host'].'/'.dirname($host['path']).'/'.$src);
-                                $sources[] = esc_url($src);
+                                $sources[] = esc_attr($src);
                         }
                         return "'" . implode("','", $sources) . "'";
                 }