Added wp_kses_post to Prefix and Suffix output of the Post Date block

WordPress · May 23, 2024 · 4d1ca75 · 4d1ca75
1 parent 97ad933
commit 4d1ca75
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/block-library/src/post-date/index.php b/packages/block-library/src/post-date/index.php
@@ -50,7 +50,7 @@ function render_block_core_post_date( $attributes, $content, $block ) {
 
 	$prefix = '';
 	if ( isset( $attributes['prefix'] ) && $attributes['prefix'] ) {
-		$prefix = '<span class="wp-block-post-date__prefix">' . $attributes['prefix'] . '</span>';
+		$prefix = wp_kses_post( '<span class="wp-block-post-date__prefix">' . $attributes['prefix'] . '</span>' );
 	}
 
 	if ( isset( $attributes['isLink'] ) && $attributes['isLink'] ) {
@@ -59,7 +59,7 @@ function render_block_core_post_date( $attributes, $content, $block ) {
 
 	$suffix = '';
 	if ( isset( $attributes['suffix'] ) && $attributes['suffix'] ) {
-		$suffix = '<span class="wp-block-post-date__suffix">' . $attributes['suffix'] . '</span>';
+		$suffix = wp_kses_post( '<span class="wp-block-post-date__suffix">' . $attributes['suffix'] . '</span>' );
 	}
 
 	return sprintf(