Ticket #20106: 20106.diff

wp-includes/category-template.php

@@ -1109 +1109 @@
                 $link = get_term_link( $term, $taxonomy );
                 if ( is_wp_error( $link ) )
                         return $link;
-                $term_links[] = '<a href="' . $link . '" rel="tag">' . $term->name . '</a>';
+                $term_links[] = '<a href="' . esc_url( $link ) . '" rel="tag">' . $term->name . '</a>';
         }
 
         $term_links = apply_filters( "term_links-$taxonomy", $term_links );