`wp_json_encode()` with default arguments is insufficient to safely escape JSON for script tags. Use `JSON_HEX_TAG | JSON_UNESCAPED_SLASHES` flags. Developed in https://github.com/WordPress/wordpress-develop/pull/9557. Props devasheeshkaul, jonsurrell, siliconforks. Fixes #63851. Built from https://develop.svn.wordpress.org/trunk@60681 git-svn-id: http://core.svn.wordpress.org/trunk@60017 1a063a9b-81f0-0310-95a4-ce76da25c4cd
14 KiB
14 KiB