Ticket #44761: 44761.2.diff

src/wp-admin/includes/misc.php

@@ -1616 +1616 @@
                         /* translators: 1: Privacy Policy guide URL, 2: additional link attributes, 3: accessibility text */
                         printf(
                                 __( 'Need help putting together your new Privacy Policy page? <a href="%1$s" %2$s>Check out our guide%3$s</a> for recommendations on what content to include, along with policies suggested by your plugins and theme.' ),
-                                admin_url( 'tools.php?wp-privacy-policy-guide=1' ),
+                                esc_url( admin_url( 'tools.php?wp-privacy-policy-guide=1' ) ),
                                 'target="_blank"',
                                 sprintf(
                                         '<span class="screen-reader-text"> %s</span>',

src/wp-admin/privacy.php

@@ -157 +157 @@
 
                         if ( 'publish' === get_post_status( $privacy_policy_page_id ) ) {
                                 /* translators: 1: URL to edit page, 2: URL to view page */
-                                printf( __( '<a href="%1$s">Edit</a> or <a href="%2$s">view</a> your Privacy Policy page content.' ), $edit_href, $view_href );
+                                printf(
+                                        __( '<a href="%1$s">Edit</a> or <a href="%2$s">view</a> your Privacy Policy page content.' ),
+                                        esc_url( $edit_href ),
+                                        esc_url( $view_href )
+                                );
                         } else {
                                 /* translators: 1: URL to edit page, 2: URL to preview page */
-                                printf( __( '<a href="%1$s">Edit</a> or <a href="%2$s">preview</a> your Privacy Policy page content.' ), $edit_href, $view_href );
+                                printf(
+                                        __( '<a href="%1$s">Edit</a> or <a href="%2$s">preview</a> your Privacy Policy page content.' ),
+                                        esc_url( $edit_href ),
+                                        esc_url( $view_href )
+                                );
                         }
 
                         ?>
@@ -171 +179 @@
                         /* translators: 1: Privacy Policy guide URL, 2: additional link attributes, 3: accessibility text */
                         printf(
                                 __( 'Need help putting together your new Privacy Policy page? <a href="%1$s" %2$s>Check out our guide%3$s</a> for recommendations on what content to include, along with policies suggested by your plugins and theme.' ),
-                                admin_url( 'tools.php?wp-privacy-policy-guide' ),
+                                esc_url( admin_url( 'tools.php?wp-privacy-policy-guide' ) ),
                                 '',
                                 ''
                         );