Changeset 52765 for trunk/src/wp-includes/blocks/search.php

Timestamp:

02/17/2022 07:16:57 PM (3 years ago)

Author:

audrasjb

Message:

Editor: Update block editor packages for WordPress 5.9.1.

The following packages were updated:

• @wordpress/block-directory@3.0.27
• @wordpress/block-editor@8.0.17
• @wordpress/block-library@6.0.26
• @wordpress/components@19.2.3
• @wordpress/core-data@4.0.10
• @wordpress/customize-widgets@2.0.27
• @wordpress/e2e-tests@2.5.18
• @wordpress/edit-post@5.0.27
• @wordpress/edit-site@3.0.27
• @wordpress/edit-widgets@3.1.22
• @wordpress/editor@12.0.21
• @wordpress/format-library@3.0.23
• @wordpress/interface@4.1.18
• @wordpress/list-reusable-blocks@3.0.20
• @wordpress/nux@5.0.20
• @wordpress/reusable-blocks@3.0.23
• @wordpress/server-side-render@3.0.20
• @wordpress/widgets@2.0.23

Props Mamaduka.
See #55179.

File:

• trunk/src/wp-includes/blocks/search.php (modified) (3 diffs)

trunk/src/wp-includes/blocks/search.php

@@ -44 +44 @@
     $border_color_classes = get_border_color_classes_for_block_core_search( $attributes );
 
+    $label_inner_html = empty( $attributes['label'] ) ? __( 'Search' ) : wp_kses_post( $attributes['label'] );
+
     $label_markup = sprintf(
         '<label for="%1$s" class="wp-block-search__label screen-reader-text">%2$s</label>',
-        $input_id,
-        empty( $attributes['label'] ) ? __( 'Search' ) : esc_html( $attributes['label'] )
+        esc_attr( $input_id ),
+        $label_inner_html
     );
     if ( $show_label && ! empty( $attributes['label'] ) ) {
@@ -53 +55 @@
             '<label for="%1$s" class="wp-block-search__label">%2$s</label>',
             $input_id,
-            esc_html( $attributes['label'] )
+            $label_inner_html
         );
     }
@@ -78 +80 @@
         if ( ! $use_icon_button ) {
             if ( ! empty( $attributes['buttonText'] ) ) {
-                $button_internal_markup = esc_html( $attributes['buttonText'] );
+                $button_internal_markup = wp_kses_post( $attributes['buttonText'] );
             }
         } else {