Index: src/wp-includes/author-template.php
===================================================================
--- src/wp-includes/author-template.php	(revision 37878)
+++ src/wp-includes/author-template.php	(working copy)
@@ -411,16 +411,21 @@
 		if ( 'list' == $args['style'] ) {
 			$return .= '<li>';
 		}
+        
+		$link = sprintf(
+			'<a href="%1$s" title="%2$s" rel="author">%3$s</a>',
+			esc_url( get_author_posts_url( $author->ID, $author->user_nicename ) ),
+			esc_attr( sprintf(__("Posts by %s"), $author->display_name) ),
+			$name
+		);
 
-		$link = '<a href="' . get_author_posts_url( $author->ID, $author->user_nicename ) . '" title="' . esc_attr( sprintf(__("Posts by %s"), $author->display_name) ) . '">' . $name . '</a>';
-
 		if ( ! empty( $args['feed_image'] ) || ! empty( $args['feed'] ) ) {
 			$link .= ' ';
 			if ( empty( $args['feed_image'] ) ) {
 				$link .= '(';
 			}
 
-			$link .= '<a href="' . get_author_feed_link( $author->ID, $args['feed_type'] ) . '"';
+			$link .= '<a href="' . esc_url( get_author_feed_link( $author->ID, $args['feed_type'] ) ) . '"';
 
 			$alt = '';
 			if ( ! empty( $args['feed'] ) ) {