Changeset 47110

Timestamp:

01/25/2020 10:04:08 PM (5 years ago)

Author:

SergeyBiryukov

Message:

Twenty Twenty: Remove unnecessary escaping of get_the_title() in comments.php.

For users with the unfiltered_html capability, titles can contain legitimate markup.

The title is filtered on saving, so the content in the database is considered safe.

Props kjellr, joyously, peterwilsoncc.
Fixes #49190.

File:

• trunk/src/wp-content/themes/twentytwenty/comments.php (modified) (2 diffs)

trunk/src/wp-content/themes/twentytwenty/comments.php

@@ -35 +35 @@
             } elseif ( '1' === $comments_number ) {
                 /* translators: %s: post title */
-                printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), esc_html( get_the_title() ) );
+                printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), get_the_title() );
             } else {
-                echo sprintf(
+                printf(
                     /* translators: 1: number of comments, 2: post title */
                     _nx(
@@ -47 +47 @@
                     ),
                     number_format_i18n( $comments_number ),
-                    esc_html( get_the_title() )
+                    get_the_title()
                 );
             }