fix: escape calendar item action link hrefs with esc_url() and link text with esc_html__() - #1016

Open

thisismyurl wants to merge 8 commits into

Automattic:developfrom

thisismyurl:fix/calendar-item-action-link-escaping

Commits on Jun 22, 2026

fix: wrap action link hrefs with esc_url() and link text with esc_html__()
thisismyurl
committed
e241ef2
test: verify calendar action link hrefs pass through esc_url()
thisismyurl
committed
53fb16c
test: fix assertion to use & (esc_url encoding) not & (esc_html encoding)
thisismyurl
committed
4185755
chore: add Unreleased CHANGELOG entry for calendar escaping fix
thisismyurl
committed
aab5844
test: drop untestable trash-link guard; keep edit + view guards
thisismyurl
committed
1e65775
chore: fix CHANGELOG format — plain imperative, props convention
thisismyurl
committed
59bb2f4
fix: capitalize docblock long descriptions to satisfy PHPCS rule
thisismyurl
committed
f54b469

Commits on Jul 13, 2026

fix: escape module short-description hrefs in Calendar and Story Budget registrations

thisismyurl
and
claude
committed
63b1e7d