fix: escape calendar item action link hrefs with esc_url() and link text with esc_html__() - #1016

Open

thisismyurl wants to merge 9 commits into

Automattic:developfrom

thisismyurl:fix/calendar-item-action-link-escaping

Commits on Sep 22, 2026

fix: wrap action link hrefs with esc_url() and link text with esc_html__()
thisismyurl
committed
61f85bf
test: verify calendar action link hrefs pass through esc_url()
thisismyurl
committed
d9396dd
test: fix assertion to use & (esc_url encoding) not & (esc_html encoding)
thisismyurl
committed
6c49387
chore: add Unreleased CHANGELOG entry for calendar escaping fix
thisismyurl
committed
a7ac605
test: drop untestable trash-link guard; keep edit + view guards
thisismyurl
committed
9aeb110
chore: fix CHANGELOG format — plain imperative, props convention
thisismyurl
committed
39d07b4
fix: capitalize docblock long descriptions to satisfy PHPCS rule
thisismyurl
committed
b2c2af6
fix: escape module short-description hrefs in Calendar and Story Budget registrations

thisismyurl
and
claude
committed
5539153
Address review feedback on #1016
thisismyurl
committed
e717259