From c9c2ff21f5582ebb56db7ddd064ac0433bf21814 Mon Sep 17 00:00:00 2001 From: Sergey Biryukov Date: Sat, 25 Jan 2020 22:06:07 +0000 Subject: [PATCH] Twenty Twenty: Remove unnecessary escaping of `get_the_title()` in `comments.php`. For users with the `unfiltered_html` capability, titles can contain legitimate markup. The title is filtered on saving, so the content in the database is considered safe. Props kjellr, joyously, peterwilsoncc. Fixes #49190. Built from https://develop.svn.wordpress.org/trunk@47110 git-svn-id: http://core.svn.wordpress.org/trunk@46910 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-content/themes/twentytwenty/comments.php | 6 +++--- wp-includes/version.php | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/wp-content/themes/twentytwenty/comments.php b/wp-content/themes/twentytwenty/comments.php index 3a435296c8..6a13a06c0c 100644 --- a/wp-content/themes/twentytwenty/comments.php +++ b/wp-content/themes/twentytwenty/comments.php @@ -34,9 +34,9 @@ if ( $comments ) { _e( 'Leave a comment', 'twentytwenty' ); } elseif ( '1' === $comments_number ) { /* translators: %s: post title */ - printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), esc_html( get_the_title() ) ); + printf( _x( 'One reply on “%s”', 'comments title', 'twentytwenty' ), get_the_title() ); } else { - echo sprintf( + printf( /* translators: 1: number of comments, 2: post title */ _nx( '%1$s reply on “%2$s”', @@ -46,7 +46,7 @@ if ( $comments ) { 'twentytwenty' ), number_format_i18n( $comments_number ), - esc_html( get_the_title() ) + get_the_title() ); } diff --git a/wp-includes/version.php b/wp-includes/version.php index 40c7551c07..3c150af2ff 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -13,7 +13,7 @@ * * @global string $wp_version */ -$wp_version = '5.4-alpha-47109'; +$wp_version = '5.4-alpha-47110'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.