Ticket #35721: 35721.2.patch

wp-admin/includes/update.php

@@ -230 +230 @@
         if ( ! isset( $cur->response ) || $cur->response != 'upgrade' )
                 return false;
 
+        $msg = sprintf(
+                /* translators: %s: New WordPress version */
+                __( '<a href="%1$s">WordPress %2$s</a> is available!' ),
+                esc_url( sprintf( __( 'https://codex.wordpress.org/Version_%s' ), $cur->current ) ),
+                $cur->current
+        );
+
         if ( current_user_can('update_core') ) {
-                $msg = sprintf( __( '<a href="https://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s" aria-label="Please update WordPress now">Please update now</a>.' ), $cur->current, network_admin_url( 'update-core.php' ) );
+                $msg .= ' <a href="' . network_admin_url( 'update-core.php' ) . '" aria-label="' . __( 'Please update WordPress now' ) . '">' . __( 'Please update now' ) . '</a>.';
         } else {
-                $msg = sprintf( __('<a href="https://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+                $msg .= ' ' . __( 'Please notify the site administrator.' );
         }
+
         echo "<div class='update-nag'>$msg</div>";
 }