Make WordPress Core

Ticket #58831: 58831-escaping-function-missing.patch

File 58831-escaping-function-missing.patch, 922 bytes (added by nidhidhandhukiya, 3 months ago)
  • wp-admin/edit-form-comment.php

     
    138138<span id="timestamp">
    139139<?php
    140140/* translators: %s: Comment date. */
    141 printf( __( 'Submitted on: %s' ), '<b>' . $submitted . '</b>' );
     141printf( __( 'Submitted on: %s' ), '<b>' . esc_html( $submitted ) . '</b>' );
    142142?>
    143143</span>
    144144<a href="#edit_timestamp" class="edit-timestamp hide-if-no-js"><span aria-hidden="true"><?php _e( 'Edit' ); ?></span> <span class="screen-reader-text"><?php _e( 'Edit date and time' ); ?></span></a>
     
    187187                printf(
    188188                        /* translators: %s: Comment link. */
    189189                        __( 'In reply to: %s' ),
    190                         '<b><a href="' . $parent_link . '">' . $name . '</a></b>'
     190                        '<b><a href="' . esc_url( $parent_link ) . '">' . esc_html( $name ) . '</a></b>'
    191191                );
    192192                ?>
    193193        </div>