Changeset 60708 for trunk/src/wp-includes/blocks.php

Timestamp:

09/04/2025 06:30:56 PM (6 months ago)

Author:

jonsurrell

Message:

Editor: Use Unicode escape encoding for "\" characters in block attributes.

Corrects an issue with block attribute encoding where JSON strings ending in the \ character would be misencoded and cause block attributes to be lost.

Client-side block serialization was updated with matching logic in ​https://github.com/WordPress/gutenberg/commit/10453ab3a4e665b8403a0cb466dba64689b4b491.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/9558.

Props jonsurrell, westonruter, mamaduka, dmsnell, shailu25.
Fixes #63917.

File:

• trunk/src/wp-includes/blocks.php (modified) (1 diff)

trunk/src/wp-includes/blocks.php

@@ -1613 +1613 @@
 function serialize_block_attributes( $block_attributes ) {
     $encoded_attributes = wp_json_encode( $block_attributes, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE );
-    $encoded_attributes = preg_replace( '/--/', '\\u002d\\u002d', $encoded_attributes );
-    $encoded_attributes = preg_replace( '/</', '\\u003c', $encoded_attributes );
-    $encoded_attributes = preg_replace( '/>/', '\\u003e', $encoded_attributes );
-    $encoded_attributes = preg_replace( '/&/', '\\u0026', $encoded_attributes );
-    // Regex: /\\"/
-    $encoded_attributes = preg_replace( '/\\\\"/', '\\u0022', $encoded_attributes );
-
-    return $encoded_attributes;
+
+    return strtr(
+        $encoded_attributes,
+        array(
+            '\\\\' => '\\u005c',
+            '--'   => '\\u002d\\u002d',
+            '<'    => '\\u003c',
+            '>'    => '\\u003e',
+            '&'    => '\\u0026',
+            '\\"'  => '\\u0022',
+        )
+    );
 }