* @param WP_User $user The current WP_User object.
*/
public function column_email( $user ) {
- echo "<a href='mailto:$user->user_email'>$user->user_email</a>";
+ echo "<a href='" . esc_url( "mailto:$user->user_email" ) . "'>$user->user_email</a>";
}
/**