From f6f7646cb6866e656b121bc522616bea46def0ec Mon Sep 17 00:00:00 2001
From: Shiva Poudel <dev.shivapoudel@gmail.com>
Date: Tue, 6 Oct 2015 10:40:11 +0545
Subject: [PATCH] Escape using esc_url instead of esc_attr for link

---
 includes/admin/class-wc-admin-post-types.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/includes/admin/class-wc-admin-post-types.php b/includes/admin/class-wc-admin-post-types.php
index f6fb10ac30c..005b759f32d 100644
--- a/includes/admin/class-wc-admin-post-types.php
+++ b/includes/admin/class-wc-admin-post-types.php
@@ -297,7 +297,7 @@ class WC_Admin_Post_Types {
 				$edit_link = get_edit_post_link( $post->ID );
 				$title     = _draft_or_post_title();
 
-				echo '<strong><a class="row-title" href="' . esc_url( $edit_link ) .'">' . $title .'</a>';
+				echo '<strong><a class="row-title" href="' . esc_url( $edit_link ) . '">' . esc_html( $title ) . '</a>';
 
 				_post_states( $post );
 
@@ -486,7 +486,7 @@ class WC_Admin_Post_Types {
 				$edit_link = get_edit_post_link( $post->ID );
 				$title     = _draft_or_post_title();
 
-				echo '<strong><a href="' . esc_attr( $edit_link ) . '" class="row-title">' . esc_html( $title ). '</a>';
+				echo '<strong><a class="row-title" href="' . esc_url( $edit_link ) . '">' . esc_html( $title ) . '</a>';
 
 				_post_states( $post );