[wp-trac] [WordPress Trac] #44115: Add `esc_html` to get_comment_link

[WordPress Trac]

#44115: Add `esc_html` to get_comment_link
--------------------------+------------------------------
 Reporter:  1naveengiri   |       Owner:  iandunn
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  trunk
 Severity:  normal        |  Resolution:  fixed
 Keywords:  needs-patch   |     Focuses:
--------------------------+------------------------------
Changes (by iandunn):

 * owner:  (none) => iandunn
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"43290" 43290]:
 {{{
 #!CommitTicketReference repository="" revision="43290"
 Comments: Escape permalink values on edit screen to prevent XSS.

 There doesn't appear to be any way for an attacker to introduce malicious
 input into the URL, unless a plugin is filtering the URL to add it, but
 it's better to be safe than sorry.

 Props 1naveengiri, joyously.
 Fixes #44115.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44115#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform