Editor: Bump @wordpress packages for 5.2.17.

desrosj · desrosj · commit 7125abfd6c78 · 2022-10-17T18:16:13.000Z
Package updates for bug fixes: * @wordpress/block-library: 2.4.13 * @wordpress/edit-post: 3.3.13 git-svn-id: https://develop.svn.wordpress.org/branches/5.2@54572 602fd350-edb4-49c9-b593-d223f7449a82
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -75,7 +75,7 @@
 		"@wordpress/autop": "2.2.0",
 		"@wordpress/blob": "2.3.0",
 		"@wordpress/block-editor": "2.0.6",
-		"@wordpress/block-library": "2.4.12",
+		"@wordpress/block-library": "2.4.13",
 		"@wordpress/block-serialization-default-parser": "3.1.0",
 		"@wordpress/blocks": "6.2.8",
 		"@wordpress/components": "7.3.5",
@@ -86,7 +86,7 @@
 		"@wordpress/deprecated": "2.2.0",
 		"@wordpress/dom": "2.2.8",
 		"@wordpress/dom-ready": "2.2.0",
-		"@wordpress/edit-post": "3.3.12",
+		"@wordpress/edit-post": "3.3.13",
 		"@wordpress/editor": "9.2.9",
 		"@wordpress/element": "2.3.0",
 		"@wordpress/escape-html": "1.2.0",
diff --git a/src/wp-includes/blocks/rss.php b/src/wp-includes/blocks/rss.php
@@ -16,7 +16,7 @@ function render_block_core_rss( $attributes ) {
 	$rss = fetch_feed( $attributes['feedURL'] );
 
 	if ( is_wp_error( $rss ) ) {
-		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . $rss->get_error_message() . '</div></div>';
+		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . esc_html( $rss->get_error_message() ) . '</div></div>';
 	}
 
 	if ( ! $rss->get_item_quantity() ) {
@@ -48,8 +48,8 @@ function render_block_core_rss( $attributes ) {
 			if ( $date ) {
 				$date = sprintf(
 					'<time datetime="%1$s" class="wp-block-rss__item-publish-date">%2$s</time> ',
-					date_i18n( get_option( 'c' ), $date ),
-					date_i18n( get_option( 'date_format' ), $date )
+					esc_attr( date_i18n( get_option( 'c' ), $date ) ),
+					esc_attr( date_i18n( get_option( 'date_format' ), $date ) )
 				);
 			}
 		}

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@ function render_block_core_rss( $attributes ) {`
`16`	`16`	`$rss = fetch_feed( $attributes['feedURL'] );`
`17`	`17`
`18`	`18`	`if ( is_wp_error( $rss ) ) {`
`19`		`- return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . $rss->get_error_message() . '</div></div>';`
	`19`	`+ return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . esc_html( $rss->get_error_message() ) . '</div></div>';`
`20`	`20`	`}`
`21`	`21`
`22`	`22`	`if ( ! $rss->get_item_quantity() ) {`
`@@ -48,8 +48,8 @@ function render_block_core_rss( $attributes ) {`
`48`	`48`	`if ( $date ) {`
`49`	`49`	`$date = sprintf(`
`50`	`50`	`'<time datetime="%1$s" class="wp-block-rss__item-publish-date">%2$s</time> ',`
`51`		`- date_i18n( get_option( 'c' ), $date ),`
`52`		`- date_i18n( get_option( 'date_format' ), $date )`
	`51`	`+ esc_attr( date_i18n( get_option( 'c' ), $date ) ),`
	`52`	`+ esc_attr( date_i18n( get_option( 'date_format' ), $date ) )`
`53`	`53`	`);`
`54`	`54`	`}`
`55`	`55`	`}`