Ticket #31080: 31080.diff

wp-includes/post-template.php

@@ -159 +159 @@
 }
 
 /**
- * Display the Post Global Unique Identifier (guid).
+ * Display the Post Global Unique Identifier (GUID).
  *
- * The guid will appear to be a link, but should not be used as an link to the
- * post. The reason you should not use it as a link, is because of moving the
- * blog across domains.
+ * While GUIDs generated by WordPress will be URLs it is important to note
+ * that content migrated from other sources may have non-URL GUIDs which is
+ * valid according to the RSS 2.0 specification.
  *
- * Url is escaped to make it xml safe
+ * The GUID is escaped to encode HTML entities and make it XML safe.
  *
  * @since 1.5.0
  *
  * @param int|WP_Post $id Optional. Post ID or post object.
  */
 function the_guid( $id = 0 ) {
-        echo esc_url( get_the_guid( $id ) );
+        echo esc_html( get_the_guid( $id ) );
 }
 
 /**