link-template string builder cleanup

[niallkennedy]

Convert dynamic strings to static strings where quick wins are available.

Wrap output such as translated strings in an esc_attr or esc_html just in case HTML can better handle what a parent page's character encoding can't.

[niallkennedy]

staticize strings. escape some strings for HTML output.

[dd32]

Looks good to me so far. One thing of note is that I have the feeling the change of 'esc_url_raw' to 'esc_url' in the final patch chunk there may be wrong..

[markjaquith]

Don't forget about the ​translation-enabled escaping functions, like esc_attr__()!

[wonderboymusic]

there are a few we can hit

[wonderboymusic]

In 34444:

Links: use consistent late-escaping in some HTML link-generation functions:

• post_comments_feed_link()
• edit_post_link()
• edit_comment_link()
• edit_bookmark_link()
• rel_canonical()

Props niallkennedy, wonderboymusic.
Fixes #14900.

[wonderboymusic]

In 34445:

After [34444​], wp_get_shortlink() can call get_queried_object_id() instead of using the $wp_query global.

See #14900.

[kraftbj]

Noting that r34444 broke the Edit links in Twenty Sixteen. ​https://github.com/WordPress/twentysixteen/issues/259

Had been using:

edit_post_link(
	sprintf(
		/* translators: %s: Name of current post */
		__( 'Edit %s', 'twentysixteen' ),
		the_title( '<span class="screen-reader-text">', '</span>', false )
	),
	'<span class="edit-link">',
	'</span>'

[wonderboymusic]

In 34452:

Links: the esc_html() additions in [34444] aren't very nice to screen reader <span>s. Revert those specific calls.

See #14900.