From 33101d0a78997cda3e96740bf477b14ed98a0254 Mon Sep 17 00:00:00 2001
From: desrosj <desrosj@git.wordpress.org>
Date: Mon, 17 Oct 2022 18:17:44 +0000
Subject: [PATCH] Editor: Bump `@wordpress` packages for 5.2.17.

Package updates for bug fixes:

* @wordpress/block-library: 2.4.13
* @wordpress/edit-post: 3.3.13
Built from https://develop.svn.wordpress.org/branches/5.2@54572


git-svn-id: http://core.svn.wordpress.org/branches/5.2@54126 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/blocks/rss.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/wp-includes/blocks/rss.php b/wp-includes/blocks/rss.php
index 34434a6e3d..65124d7094 100644
--- a/wp-includes/blocks/rss.php
+++ b/wp-includes/blocks/rss.php
@@ -16,7 +16,7 @@ function render_block_core_rss( $attributes ) {
 	$rss = fetch_feed( $attributes['feedURL'] );
 
 	if ( is_wp_error( $rss ) ) {
-		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . $rss->get_error_message() . '</div></div>';
+		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . esc_html( $rss->get_error_message() ) . '</div></div>';
 	}
 
 	if ( ! $rss->get_item_quantity() ) {
@@ -48,8 +48,8 @@ function render_block_core_rss( $attributes ) {
 			if ( $date ) {
 				$date = sprintf(
 					'<time datetime="%1$s" class="wp-block-rss__item-publish-date">%2$s</time> ',
-					date_i18n( get_option( 'c' ), $date ),
-					date_i18n( get_option( 'date_format' ), $date )
+					esc_attr( date_i18n( get_option( 'c' ), $date ) ),
+					esc_attr( date_i18n( get_option( 'date_format' ), $date ) )
 				);
 			}
 		}