Ticket #16611: 16611.diff

wp-admin/includes/class-wp-list-table.php

@@ -420 +420 @@
                 if ( $pending_comments )
                         echo '<strong>';
 
-                $link = "<a href='" . add_query_arg( 'p', $post_id, admin_url('edit-comments.php') ) . "' title='$pending_phrase' class='post-com-count'><span class='comment-count'>%s</span></a>";
+                $link = "<a href='%s' title='" . esc_attr( $pending_phrase ) . "' class='post-com-count'><span class='comment-count'>%s</span></a>";
+                $url = add_query_arg( 'p', $post_id, admin_url( 'edit-comments.php' ) );
 
                 comments_number(
-                        sprintf( $link, /* translators: comment count link */ _x( '0', 'comment count' ) ),
-                        sprintf( $link, /* translators: comment count link */ _x( '1', 'comment count' ) ),
-                        sprintf( $link, /* translators: comment count link: % will be substituted by comment count */ _x( '%', 'comment count' ) )
+                        sprintf( $link, $url, /* translators: comment count link */ _x( '0', 'comment count' ) ),
+                        sprintf( $link, $url, /* translators: comment count link */ _x( '1', 'comment count' ) ),
+                        sprintf( $link, $url, /* translators: comment count link: % will be substituted by comment count */ _x( '%', 'comment count' ) )
                 );
 
                 if ( $pending_comments )