From 64681631f1078657e8921fde31d7c590726e7e71 Mon Sep 17 00:00:00 2001
From: Sergey Biryukov <sergeybiryukov@git.wordpress.org>
Date: Thu, 21 Mar 2019 10:44:21 +0000
Subject: [PATCH] Menus: Use `esc_url()` for the `href` value of page link
 attributes in `Walker_Page::start_el()`, for consistency with
 `Walker_Nav_Menu` and `Walker_Category`.

See #40666, #40359.

git-svn-id: https://develop.svn.wordpress.org/trunk@44958 602fd350-edb4-49c9-b593-d223f7449a82
---
 src/wp-includes/class-walker-page.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/wp-includes/class-walker-page.php b/src/wp-includes/class-walker-page.php
index 3ade8b00df..50990298f1 100644
--- a/src/wp-includes/class-walker-page.php
+++ b/src/wp-includes/class-walker-page.php
@@ -183,7 +183,7 @@ class Walker_Page extends Walker {
 		$attributes = '';
 		foreach ( $atts as $attr => $value ) {
 			if ( ! empty( $value ) ) {
-				$value       = esc_attr( $value );
+				$value       = ( 'href' === $attr ) ? esc_url( $value ) : esc_attr( $value );
 				$attributes .= ' ' . $attr . '="' . $value . '"';
 			}
 		}