From c0f3582777d24b484acb19a80f67e4c9e76bf2cc Mon Sep 17 00:00:00 2001
From: Michael Fields <michael@mfields.org>
Date: Wed, 6 Feb 2013 20:43:42 -0800
Subject: [PATCH] Escape the return value of admin_url() with esc_url()

---
 no-results.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/no-results.php b/no-results.php
index cef67db9..6b14c77b 100644
--- a/no-results.php
+++ b/no-results.php
@@ -17,7 +17,7 @@
 	<div class="entry-content">
 		<?php if ( is_home() && current_user_can( 'publish_posts' ) ) : ?>
 
-			<p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), admin_url( 'post-new.php' ) ); ?></p>
+			<p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), esc_url( admin_url( 'post-new.php' ) ) ); ?></p>
 
 		<?php elseif ( is_search() ) : ?>