Ticket #42608: 42608.2.diff

src/wp-includes/widgets.php

@@ -426 +426 @@
         global $wp_registered_sidebars;
 
         if ( isset( $wp_registered_sidebars[ $id ]['description'] ) ) {
-                return esc_html( $wp_registered_sidebars[ $id ]['description'] );
+                return wp_kses( $wp_registered_sidebars[ $id ]['description'], 'sidebar_description' );
         }
 }