Escape the return value of admin_url() with esc_url()

Automattic · Feb 7, 2013 · c0f3582 · c0f3582
1 parent ce069e6
commit c0f3582
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/no-results.php b/no-results.php
@@ -17,7 +17,7 @@
 	<div class="entry-content">
 		<?php if ( is_home() && current_user_can( 'publish_posts' ) ) : ?>
 
-			<p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), admin_url( 'post-new.php' ) ); ?></p>
+			<p><?php printf( __( 'Ready to publish your first post? <a href="%1$s">Get started here</a>.', '_s' ), esc_url( admin_url( 'post-new.php' ) ) ); ?></p>
 
 		<?php elseif ( is_search() ) : ?>