Changeset 52765 for trunk/src/wp-includes/blocks/search.php

Timestamp:

02/17/2022 07:16:57 PM (4 years ago)

Author:

audrasjb

Message:

Editor: Update block editor packages for WordPress 5.9.1.

The following packages were updated:

• @wordpress/block-directory@3.0.27
• @wordpress/block-editor@8.0.17
• @wordpress/block-library@6.0.26
• @wordpress/components@19.2.3
• @wordpress/core-data@4.0.10
• @wordpress/customize-widgets@2.0.27
• @wordpress/e2e-tests@2.5.18
• @wordpress/edit-post@5.0.27
• @wordpress/edit-site@3.0.27
• @wordpress/edit-widgets@3.1.22
• @wordpress/editor@12.0.21
• @wordpress/format-library@3.0.23
• @wordpress/interface@4.1.18
• @wordpress/list-reusable-blocks@3.0.20
• @wordpress/nux@5.0.20
• @wordpress/reusable-blocks@3.0.23
• @wordpress/server-side-render@3.0.20
• @wordpress/widgets@2.0.23

Props Mamaduka.
See #55179.

File:

• trunk/src/wp-includes/blocks/search.php (modified) (3 diffs)

trunk/src/wp-includes/blocks/search.php

@@ -44 +44 @@
         $border_color_classes = get_border_color_classes_for_block_core_search( $attributes );
 
+        $label_inner_html = empty( $attributes['label'] ) ? __( 'Search' ) : wp_kses_post( $attributes['label'] );
+
         $label_markup = sprintf(
                 '<label for="%1$s" class="wp-block-search__label screen-reader-text">%2$s</label>',
-                $input_id,
-                empty( $attributes['label'] ) ? __( 'Search' ) : esc_html( $attributes['label'] )
+                esc_attr( $input_id ),
+                $label_inner_html
         );
         if ( $show_label && ! empty( $attributes['label'] ) ) {
@@ -53 +55 @@
                         '<label for="%1$s" class="wp-block-search__label">%2$s</label>',
                         $input_id,
-                        esc_html( $attributes['label'] )
+                        $label_inner_html
                 );
         }
@@ -78 +80 @@
                 if ( ! $use_icon_button ) {
                         if ( ! empty( $attributes['buttonText'] ) ) {
-                                $button_internal_markup = esc_html( $attributes['buttonText'] );
+                                $button_internal_markup = wp_kses_post( $attributes['buttonText'] );
                         }
                 } else {