diff -r 48c4eec2b7e6 -r 8c2e4d02f4ef wp/wp-admin/admin-footer.php
--- a/wp/wp-admin/admin-footer.php	Fri Sep 05 18:40:08 2025 +0200
+++ b/wp/wp-admin/admin-footer.php	Fri Sep 05 18:52:52 2025 +0200
@@ -35,7 +35,7 @@
 		$text = sprintf(
 			/* translators: %s: https://wordpress.org/ */
 			__( 'Thank you for creating with <a href="%s">WordPress</a>.' ),
-			__( 'https://wordpress.org/' )
+			esc_url( __( 'https://wordpress.org/' ) )
 		);
 
 		/**