WP_List_Table: Improve escaping.

Author: costdev

src/wp-admin/includes/class-wp-list-table.php

@@ -1541,7 +1541,7 @@ protected function get_views_links( $link_data = array() ) {
 						/* translators: %1$s: The argument name. %2$s: The view name. */
 						__( 'The <code>%1$s</code> argument must be a non-empty string for <code>%2$s</code>.' ),
 						'url',
-						$view
+						esc_html( $view )
 					),
 					'6.1.0'
 				);
@@ -1556,7 +1556,7 @@ protected function get_views_links( $link_data = array() ) {
 						/* translators: %1$s: The argument name. %2$s: The view name. */
 						__( 'The <code>%1$s</code> argument must be a non-empty string for <code>%2$s</code>.' ),
 						'label',
-						$view
+						esc_html( $view )
 					),
 					'6.1.0'
 				);
@@ -1566,7 +1566,7 @@ protected function get_views_links( $link_data = array() ) {
 
 			$views_links[ $view ] = sprintf(
 				'<a href="%s"%s>%s</a>',
-				$link['url'],
+				esc_url( $link['url'] ),
 				isset( $link['current'] ) && true === $link['current'] ? ' class="current" aria-current="page"' : '',
 				$link['label']
 			);