Ticket #17636: 17636.patch

wp-admin/edit-comments.php

@@ -140 +140 @@
         echo __('Comments');
 
 if ( isset($_REQUEST['s']) && $_REQUEST['s'] )
-        printf( '<span class="subtitle">' . sprintf( __( 'Search results for &#8220;%s&#8221;' ), wp_html_excerpt( esc_html( stripslashes( $_REQUEST['s'] ) ), 50 ) ) . '</span>' ); ?>
+        printf( '<span class="subtitle">' . sprintf( __( 'Search results for &#8220;%s&#8221;' ), wp_strip_all_tags( esc_html( stripslashes( $_REQUEST['s'] ) ), true ) ) . '</span>' ); ?>
 </h2>
 
 <?php