Changeset 52967

Timestamp:

03/20/2022 05:37:21 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Escape the comment post URL in _wp_dashboard_recent_comments_row().

Follow-up to [6705].

Props kebbet.
See #54728.

File:

• trunk/src/wp-admin/includes/dashboard.php (modified) (1 diff)

trunk/src/wp-admin/includes/dashboard.php

@@ -686 +686 @@
         $comment_post_title = _draft_or_post_title( $comment->comment_post_ID );
         $comment_post_url   = get_the_permalink( $comment->comment_post_ID );
-        $comment_post_link  = "<a href='$comment_post_url'>$comment_post_title</a>";
+        $comment_post_link  = '<a href="' . esc_url( $comment_post_url ) . '">' . $comment_post_title . '</a>';
     } else {
         $comment_post_link = '';