Changeset 53157 for trunk/src/wp-includes/blocks/site-title.php

Timestamp:

04/12/2022 03:10:30 PM (3 years ago)

Author:

gziolo

Message:

Editor: Update WordPress packages based based on Gutenberg v13.0 RC3

This is the last step of backports from the Gutenberg plugin for WordPress 6.0 Beta 1 release. It includes all updates WordPress packages published to npm based on the Gutenberg plugin v13.0 RC3 release. This patch also includes all the necessary changes applied to core blocks. New blocks included:

• Avatar
• Comment Author Name
• Comment Content
• Comment Date
• Comment Edit Link
• Comment Rely Link
• Comment Template
• Comments Pagination
• Comments Pagination Next
• Comments Pagination Previous
• Comments Query Loop
• Home Link
• Post Author Biography
• Query No Results
• Read More

See more details in ​https://github.com/WordPress/wordpress-develop/pull/2564.

Props zieladam, ramonopoly, ocean90.
Fixes #55505.

File:

• trunk/src/wp-includes/blocks/site-title.php (modified) (3 diffs)

trunk/src/wp-includes/blocks/site-title.php

@@ -25 +25 @@
 
     if ( isset( $attributes['level'] ) ) {
-        $tag_name = 0 === $attributes['level'] ? 'p' : 'h' . $attributes['level'];
+        $tag_name = 0 === $attributes['level'] ? 'p' : 'h' . (int) $attributes['level'];
     }
 
     if ( $attributes['isLink'] ) {
         $link_attrs = array(
-            'href="' . get_bloginfo( 'url' ) . '"',
-            'rel="home"',
+            'href="' . esc_url( get_bloginfo( 'url' ) ) . '"',
+            'rel="' . esc_attr( 'home' ) . '"',
             $aria_current,
         );
@@ -37 +37 @@
             $link_attrs[] = 'target="_blank"';
         }
-        $site_title = sprintf( '<a %1$s>%2$s</a>', implode( ' ', $link_attrs ), $site_title );
+        $site_title = sprintf( '<a %1$s>%2$s</a>', implode( ' ', $link_attrs ), esc_html( $site_title ) );
     }
     $wrapper_attributes = get_block_wrapper_attributes( array( 'class' => $align_class_name ) );
@@ -45 +45 @@
         $tag_name,
         $wrapper_attributes,
-        $site_title
+        // already pre-escaped if it is a link.
+        $attributes['isLink'] ? $site_title : esc_html( $site_title )
     );
 }