From 8193278b064cf088675bd0ea5aaf881f02ac7820 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 17 Apr 2026 17:43:07 +0000
Subject: [PATCH 1/2] Output without escaping for dynamic link text #65090

---
 src/wp-login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/wp-login.php b/src/wp-login.php
index abedea82c3589..4bb1b4c40b78c 100644
--- a/src/wp-login.php
+++ b/src/wp-login.php
@@ -231,7 +231,7 @@ function login_header( $title = null, $message = '', $wp_error = null ) {
 	$message = apply_filters( 'login_message', $message );
 
 	if ( ! empty( $message ) ) {
-		echo $message . "\n";
+		echo wp_kses_post( $message ) . "\n";
 	}
 
 	// In case a plugin uses $error rather than the $wp_errors object.

From 9e51406641988c88da7037dbca94f51eca93eb4c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 17 Apr 2026 17:43:09 +0000
Subject: [PATCH 2/2] Fix: Unnecessary horizontal scrollbar on theme-editor.php
 in WordPress 7.0 RC1

---
 src/wp-admin/css/common.css | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/wp-admin/css/common.css b/src/wp-admin/css/common.css
index f3128b9e657ca..9f92fbdac7c62 100644
--- a/src/wp-admin/css/common.css
+++ b/src/wp-admin/css/common.css
@@ -4141,7 +4141,7 @@ img {
 
 	#templateside li:not(.howto) a {
 		display: block;
-		padding: 5px;
+		padding: 5px 0 5px 5px;
 	}
 	#templateside li.howto {
 		padding: 12px;
@@ -4192,7 +4192,7 @@ img {
 	}
 	.wrap #templateside span.notice {
 		margin-left: -5px;
-		width: 100%;
+		width: auto;
 	}
 
 	.fileedit-sub .alignright {