diff --git a/WordPress/Sniffs/XSS/EscapeOutputSniff.php b/WordPress/Sniffs/XSS/EscapeOutputSniff.php
index <HASH>..<HASH> 100644
--- a/WordPress/Sniffs/XSS/EscapeOutputSniff.php
+++ b/WordPress/Sniffs/XSS/EscapeOutputSniff.php
@@ -374,14 +374,14 @@ class WordPress_Sniffs_XSS_EscapeOutputSniff implements PHP_CodeSniffer_Sniff
 			if ( $watch === false )
 				continue;
 
-			$watch = false;
-
 			// Allow T_CONSTANT_ENCAPSED_STRING eg: echo 'Some String';
 			// Also T_LNUMBER, e.g.: echo 45;
 			if ( in_array( $tokens[$i]['code'], array( T_CONSTANT_ENCAPSED_STRING, T_LNUMBER ) ) ) {
 				continue;
 			}
 
+			$watch = false;
+
 			// Allow int/double/bool casted variables
 			if ( in_array( $tokens[$i]['code'], array( T_INT_CAST, T_DOUBLE_CAST, T_BOOL_CAST ) ) ) {
 				continue;
Stay awake after encountering an integer or string

Otherwise this test fails:

```php
wp_die( esc_html( $message ), '', array( 'back_link' => $link_text ) );
// Bad
```

No message is reported saying that `$link_text` needs to be escaped,
because of the `’back_link’` string.