Ticket #34625: 34625.4.diff

src/wp-login.php

@@ -100 +100 @@
                 $login_header_url   = network_home_url();
                 $login_header_title = get_network()->site_name;
         } else {
-                $login_header_url   = __( 'https://wordpress.org/' );
-                $login_header_title = __( 'Powered by WordPress' );
+                $login_header_url   = home_url();
+                $login_header_title = get_bloginfo( 'name' );
         }
 
         /**
@@ -158 +158 @@
         do_action( 'login_header' );
         ?>
         <div id="login">
-                <h1><a href="<?php echo esc_url( $login_header_url ); ?>" title="<?php echo esc_attr( $login_header_title ); ?>" tabindex="-1"><?php bloginfo( 'name' ); ?></a></h1>
+                <h1><a href="<?php echo esc_url( $login_header_url ); ?>" tabindex="-1"><?php echo esc_html( $login_header_title ); ?></a></h1> 
         <?php
 
         unset( $login_header_url, $login_header_title );
@@ -358 +358 @@
 
         /**
          * Filters the message body of the password reset mail.
-         * 
+         *
          * If the filtered message is empty, the password reset email will not be sent.
          *
          * @since 2.8.0