From 9f58e3f6e208158c3e814a34206ff8db247a4d0f Mon Sep 17 00:00:00 2001
From: Michael Fields <michael@mfields.org>
Date: Wed, 6 Feb 2013 20:48:04 -0800
Subject: [PATCH] Escape the return value of get_author_posts_url() with
 esc_url().

---
 archive.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/archive.php b/archive.php
index 9542a31e..575cfea6 100644
--- a/archive.php
+++ b/archive.php
@@ -29,7 +29,7 @@ get_header(); ?>
 								 * what author we're dealing with (if that is the case).
 								*/
 								the_post();
-								printf( __( 'Author Archives: %s', '_s' ), '<span class="vcard"><a class="url fn n" href="' . get_author_posts_url( get_the_author_meta( "ID" ) ) . '" title="' . esc_attr( get_the_author() ) . '" rel="me">' . get_the_author() . '</a></span>' );
+								printf( __( 'Author Archives: %s', '_s' ), '<span class="vcard"><a class="url fn n" href="' . esc_url( get_author_posts_url( get_the_author_meta( "ID" ) ) ) . '" title="' . esc_attr( get_the_author() ) . '" rel="me">' . get_the_author() . '</a></span>' );
 								/* Since we called the_post() above, we need to
 								 * rewind the loop back to the beginning that way
 								 * we can run the loop properly, in full.