Revisions: Make sure our templating is properly escaped

[markjaquith]

Needs a review to make sure we're using the escaped versions of our JS templating where appropriate.

[markjaquith]

First pass.

[markjaquith]

Grab another one.

[nacin]

I think {{{ to {{ for restoreUrl requires us to undo & => & that is done by wp_nonce_url()? I can't tell if it just accidentally works, or if {{ deliberately doesn't re-escape &

[markjaquith]

In 24729:

Revisions: use escaped templating for some of the tags.

Fixes #24775.

[nacin]

(Per IRC, ignoring the none URL aspect for now.)

[rmccue]

Replying to nacin:

I think {{{ to {{ for restoreUrl requires us to undo & => & that is done by wp_nonce_url()? I can't tell if it just accidentally works, or if {{ deliberately doesn't re-escape &

Looks like {{ should reescape everything, based on ​the source.

[ocean90]

Replying to nacin:

(Per IRC, ignoring the none URL aspect for now.)

Was handled in https://core.trac.wordpress.org/changeset/24761#file4.