Merge pull request #1367 from devcogs/comments-1366

escape get_the_title

comments.php

@@ -33,14 +33,14 @@ if ( post_password_required() ) {
 				printf(
 					/* translators: 1: title. */
 					esc_html__( 'One thought on “%1$s”', '_s' ),
-					'<span>' . get_the_title() . '</span>'
+					'<span>' . wp_kses_post( get_the_title() ) . '</span>'
 				);
 			} else {
 				printf( // WPCS: XSS OK.
 					/* translators: 1: comment count number, 2: title. */
 					esc_html( _nx( '%1$s thought on &ldquo;%2$s&rdquo;', '%1$s thoughts on &ldquo;%2$s&rdquo;', $_s_comment_count, 'comments title', '_s' ) ),
 					number_format_i18n( $_s_comment_count ),
-					'<span>' . get_the_title() . '</span>'
+					'<span>' . wp_kses_post( get_the_title() ) . '</span>'
 				);
 			}
 			?>

inc/template-tags.php

@@ -86,7 +86,7 @@ if ( ! function_exists( '_s_entry_footer' ) ) :
 							),
 						)
 					),
-					get_the_title()
+					wp_kses_post( get_the_title() )
 				)
 			);
 			echo '</span>';
@@ -103,7 +103,7 @@ if ( ! function_exists( '_s_entry_footer' ) ) :
 						),
 					)
 				),
-				get_the_title()
+				wp_kses_post( get_the_title() )
 			),
 			'<span class="edit-link">',
 			'</span>'

template-parts/content-page.php

@@ -41,7 +41,7 @@
 							),
 						)
 					),
-					get_the_title()
+					wp_kses_post( get_the_title() )
 				),
 				'<span class="edit-link">',
 				'</span>'

template-parts/content.php

@@ -43,7 +43,7 @@
 					),
 				)
 			),
-			get_the_title()
+			wp_kses_post( get_the_title() )
 		) );
 
 		wp_link_pages( array(