From aca0662839f955a8b178a8b8eea65d95a5aea674 Mon Sep 17 00:00:00 2001
From: Mike Jolley <mike.jolley@me.com>
Date: Thu, 1 Mar 2018 10:37:39 +0000
Subject: [PATCH] KSES instead of escaping of download names

Fixes #19181
---
 templates/emails/email-downloads.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/emails/email-downloads.php b/templates/emails/email-downloads.php
index 0d02be04865..a5fcff7f353 100644
--- a/templates/emails/email-downloads.php
+++ b/templates/emails/email-downloads.php
@@ -41,7 +41,7 @@ $text_align = is_rtl() ? 'right' : 'left';
 						switch ( $column_id ) {
 							case 'download-product':
 								?>
-								<a href="<?php echo esc_url( get_permalink( $download['product_id'] ) ); ?>"><?php echo esc_html( $download['product_name'] ); ?></a>
+								<a href="<?php echo esc_url( get_permalink( $download['product_id'] ) ); ?>"><?php echo wp_kses_post( $download['product_name'] ); ?></a>
 								<?php
 								break;
 							case 'download-file':