[wp-trac] [WordPress Trac] #60990: Change esc_html to esc_url

[WordPress Trac]

#60990: Change esc_html to esc_url
-----------------------------------+-------------------------------
 Reporter:  truptikanzariya        |       Owner:  (none)
     Type:  defect (bug)           |      Status:  new
 Priority:  normal                 |   Milestone:  Awaiting Review
Component:  Application Passwords  |     Version:
 Severity:  normal                 |  Resolution:
 Keywords:  has-patch              |     Focuses:  coding-standards
-----------------------------------+-------------------------------
Changes (by dd32):

 * component:  General => Application Passwords


Comment:

 I believe this is intentionally using `esc_html()` and not `esc_url()`, as
 the link is output on the page, rather than as part of a `<a href`
 attribute. This is also not the only location on that page where the link
 is output using `esc_html()`. Anywhere that would use it as a link uses
 `esc_url()` though.

 The code originated in https://github.com/WordPress/application-passwords/
 - but I can't find the actual source of it there.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60990#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform