Commit 800cbdbc7 for woocommerce

commit 800cbdbc7eb3d9aef9f294afa40f3c79a28c8742
Author: roykho <roykho77@gmail.com>
Date:   Thu Oct 15 16:25:49 2020 -0700

    Add missing escapes

diff --git a/includes/admin/meta-boxes/class-wc-meta-box-order-data.php b/includes/admin/meta-boxes/class-wc-meta-box-order-data.php
index 754461f62..3088d758b 100644
--- a/includes/admin/meta-boxes/class-wc-meta-box-order-data.php
+++ b/includes/admin/meta-boxes/class-wc-meta-box-order-data.php
@@ -344,8 +344,8 @@ class WC_Meta_Box_Order_Data {

 								if ( 'billing_phone' === $field_name ) {
 									$field_value = wc_make_phone_clickable( $field_value );
-								} else if ( 'billing_email' === $field_name ) {
-									$field_value = '<a href="mailto:' . $field_value . '">' . $field_value . '</a>';
+								} elseif ( 'billing_email' === $field_name ) {
+									$field_value = '<a href="mailto:' . esc_attr( $field_value ) . '">' . esc_html( $field_value ) . '</a>';
 								} else {
 									$field_value = make_clickable( esc_html( $field_value ) );
 								}