Changeset 56437 for trunk/src/wp-admin/revision.php

Timestamp:

08/24/2023 09:30:17 AM (16 months ago)

Author:

audrasjb

Message:

Revisions: Add missing escaping function for $post_edit_link in wp-admin/revision.php.

Props nidhidhandhukiya, Presskopp, mukesh27, rajinsharwar, costdev.
Fixes #59141.

File:

• trunk/src/wp-admin/revision.php (modified) (1 diff)

trunk/src/wp-admin/revision.php

@@ -105 +105 @@
 
         $post_edit_link = get_edit_post_link();
-        $post_title     = '<a href="' . $post_edit_link . '">' . _draft_or_post_title() . '</a>';
+        $post_title     = '<a href="' . esc_url( $post_edit_link ) . '">' . _draft_or_post_title() . '</a>';
         /* translators: %s: Post title. */
         $h1             = sprintf( __( 'Compare Revisions of &#8220;%s&#8221;' ), $post_title );
-        $return_to_post = '<a href="' . $post_edit_link . '">' . __( '&larr; Go to editor' ) . '</a>';
+        $return_to_post = '<a href="' . esc_url( $post_edit_link ) . '">' . __( '&larr; Go to editor' ) . '</a>';
         // Used in the HTML title tag.
         $title = __( 'Revisions' );