Changeset 55614

Timestamp:

03/30/2023 03:16:47 PM (18 months ago)

Author:

SergeyBiryukov

Message:

Comments: Use correct escaping function in get_cancel_comment_reply_link().

Follow-up to [9112], [9406], [11011], [11380], [11383], [44659].

Props chintan1896, ankitmaru.
Fixes #58025.

File:

• trunk/src/wp-includes/comment-template.php (modified) (1 diff)

trunk/src/wp-includes/comment-template.php

@@ -1942 +1942 @@
     $reply_to_id = $post ? _get_comment_reply_id( $post->ID ) : 0;
     $style       = 0 !== $reply_to_id ? '' : ' style="display:none;"';
-    $link        = esc_html( remove_query_arg( array( 'replytocom', 'unapproved', 'moderation-hash' ) ) ) . '#respond';
+    $link        = esc_url( remove_query_arg( array( 'replytocom', 'unapproved', 'moderation-hash' ) ) ) . '#respond';
 
     $formatted_link = '<a rel="nofollow" id="cancel-comment-reply-link" href="' . $link . '"' . $style . '>' . $text . '</a>';