Ticket #41413: 41413.patch

src/wp-includes/functions.php

@@ -1433 +1433 @@
  */
 function wp_nonce_url( $actionurl, $action = -1, $name = '_wpnonce' ) {
         $actionurl = str_replace( '&', '&', $actionurl );
-        return esc_html( add_query_arg( $name, wp_create_nonce( $action ), $actionurl ) );
+        return esc_url( add_query_arg( $name, wp_create_nonce( $action ), $actionurl ) );
 }
 
 /**