Avatar url is wrongly escaped in "what's new form"

[hz_i3]

To reproduce the problem:

Turn on "show avatar" of WordPress on "/wp-admin/options-discussion.php"
Change "Default Avatar" to "Retro (Generated)"
Create a new user without no avatar
Log in with that user
Go to its member page
A Gravatar Logo is shown rather than a Retro style avatar

The problem is the url is escaped (seen from the screenshot)... If I replace "&" with "&", the Retro style avatar will show.

I tried to look into PHP source code (mainly the bp-nouveau directory) but I cannot find where it is escaped, maybe in JS code

Screenshot:

[imath]

Hi @hz_i3

Thanks for your report and good catch about this issue. I'll commit the above fix asap.

[imath]

In 12896:

Make sure the Activity Post Form uses the right default Gravatar

The Nouveau JavaScript template was wrongly escaping the Gravatar URL.

Props hz_i3

Fixes #8337