Changeset 47636

Timestamp:

04/29/2020 03:32:19 PM (4 years ago)

Author:

whyisjake

Message:

Block Editor: Coding standards, properly escape class names.

Props: aduth, noisysocks, pento, talldanwp, jorgefilipecosta, whyisjake, ellatrix, ehti.

Location:

trunk/src/wp-includes/blocks

Files:

• rss.php (modified) (1 diff)
• search.php (modified) (1 diff)

trunk/src/wp-includes/blocks/rss.php

@@ -93 +93 @@
     }
 
-    return "<ul class='{$class}'>{$list_items}</ul>";
+    return sprintf( "<ul class='%s'>%s</ul>", esc_attr( $class ), $list_items );
 }
 

trunk/src/wp-includes/blocks/search.php

@@ -58 +58 @@
     return sprintf(
         '<form class="%s" role="search" method="get" action="%s">%s</form>',
-        $class,
+        esc_attr( $class ),
         esc_url( home_url( '/' ) ),
         $label_markup . $input_markup . $button_markup