Some extra XSS protection. Redundant, but we should always escape late! see #11119

git-svn-id: http://svn.automattic.com/wordpress/trunk@12169 1a063a9b-81f0-0310-95a4-ce76da25c4cd

wp-admin/press-this.php

@@ -582,7 +582,7 @@ var photostorage = false;
 						echo '<p>';
 						if ( $selection )
 							_e('via ');
-						echo "<a href='$url'>$title</a>.</p>";
+						printf( "<a href='%s'>%s</a>.</p>", esc_url( $url ), esc_html( $title ) );
 					}
 				?></textarea>
 			</div>