Ticket #37249: author-template.diff

src/wp-includes/author-template.php

@@ -411 +411 @@
                 if ( 'list' == $args['style'] ) {
                         $return .= '<li>';
                 }
+        
+                $link = sprintf(
+                        '<a href="%1$s" title="%2$s" rel="author">%3$s</a>',
+                        esc_url( get_author_posts_url( $author->ID, $author->user_nicename ) ),
+                        esc_attr( sprintf(__("Posts by %s"), $author->display_name) ),
+                        $name
+                );
 
-                $link = '<a href="' . get_author_posts_url( $author->ID, $author->user_nicename ) . '" title="' . esc_attr( sprintf(__("Posts by %s"), $author->display_name) ) . '">' . $name . '</a>';
-
                 if ( ! empty( $args['feed_image'] ) || ! empty( $args['feed'] ) ) {
                         $link .= ' ';
                         if ( empty( $args['feed_image'] ) ) {
                                 $link .= '(';
                         }
 
-                        $link .= '<a href="' . get_author_feed_link( $author->ID, $args['feed_type'] ) . '"';
+                        $link .= '<a href="' . esc_url( get_author_feed_link( $author->ID, $args['feed_type'] ) ) . '"';
 
                         $alt = '';
                         if ( ! empty( $args['feed'] ) ) {