Coding Standards: Escape edit profile URL in default_password_nag().

Props utsav72640, mukesh27.
Fixes #58182.


git-svn-id: https://develop.svn.wordpress.org/trunk@55682 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Jb Audras 2023-04-24 16:42:19 +00:00
parent 16f9d4d2f9
commit c2bd49c91f

View File

@ -531,7 +531,7 @@ function default_password_nag() {
echo '<strong>' . __( 'Notice:' ) . '</strong> ';
_e( 'You&rsquo;re using the auto-generated password for your account. Would you like to change it?' );
echo '</p><p>';
printf( '<a href="%s">' . __( 'Yes, take me to my profile page' ) . '</a> | ', get_edit_profile_url() . '#password' );
printf( '<a href="%s">' . __( 'Yes, take me to my profile page' ) . '</a> | ', esc_url( get_edit_profile_url() . '#password' ) );
printf( '<a href="%s" id="default-password-nag-no">' . __( 'No thanks, do not remind me again' ) . '</a>', '?default_password_nag=0' );
echo '</p></div>';
}