Changeset 47110 for trunk/src/wp-content/themes/twentytwenty/comments.php

Timestamp:

01/25/2020 10:04:08 PM (7 years ago)

Author:

SergeyBiryukov

Message:

Twenty Twenty: Remove unnecessary escaping of get_the_title() in comments.php.

For users with the unfiltered_html capability, titles can contain legitimate markup.

The title is filtered on saving, so the content in the database is considered safe.

Props kjellr, joyously, peterwilsoncc.
Fixes #49190.

File:

• trunk/src/wp-content/themes/twentytwenty/comments.php (modified) (2 diffs)

trunk/src/wp-content/themes/twentytwenty/comments.php

@@ -35 +35 @@
                         } elseif ( '1' === $comments_number ) {
                                 /* translators: %s: post title */
-                                printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), esc_html( get_the_title() ) );
+                                printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), get_the_title() );
                         } else {
-                                echo sprintf(
+                                printf(
                                         /* translators: 1: number of comments, 2: post title */
                                         _nx(
@@ -47 +47 @@
                                         ),
                                         number_format_i18n( $comments_number ),
-                                        esc_html( get_the_title() )
+                                        get_the_title()
                                 );
                         }