← All changes | build/scripts/block-library/post-date.php +2 -2 23.3.0 → trunk View file →

		@@ -80,12 +80,12 @@
80	80	}
81	81
82	82	$wrapper_attributes = get_block_wrapper_attributes( array( 'class' => implode( ' ', $classes ) ) );
83	83
84		- $time_tag = sprintf( '<time datetime="%1$s">%2$s</time>', $unformatted_date, $formatted_date );
	84	+ $time_tag = sprintf( '<time datetime="%1$s">%2$s</time>', esc_attr( $unformatted_date ), esc_html( $formatted_date ) );
85	85
86	86	if ( isset( $attributes['isLink'] ) && $attributes['isLink'] && isset( $block->context['postId'] ) ) {
87		- $time_tag = sprintf( '<a href="%1s">%2s</a>', get_the_permalink( $block->context['postId'] ), $time_tag );
	87	+ $time_tag = sprintf( '<a href="%1$s">%2$s</a>', esc_url( get_the_permalink( $block->context['postId'] ) ), $time_tag );
88	88	}
89	89
90	90	return sprintf( '<div %1$s>%2$s</div>', $wrapper_attributes, $time_tag );
91	91	}