More comment cookie sanitation.

git-svn-id: https://develop.svn.wordpress.org/trunk@3577 602fd350-edb4-49c9-b593-d223f7449a82

wp-includes/functions-formatting.php

@@ -579,7 +579,11 @@ function make_clickable($ret) {
 }
 
 function wp_rel_nofollow( $text ) {
+	global $wpdb;
+	// This is a pre save filter, so text is already escaped.
+	$text = stripslashes($text);
 	$text = preg_replace('|<a (.+?)>|i', '<a $1 rel="nofollow">', $text);
+	$text = $wpdb->escape($text);
 	return $text;
 }