escape styles attribute in comment avatar (#36988)

Co-authored-by: Carlos Bravo <[email protected]>
WordPress · Nov 30, 2021 · 9724a3f · 9724a3f
1 parent 570751a
commit 9724a3f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/block-library/src/comment-author-avatar/index.php b/packages/block-library/src/comment-author-avatar/index.php
@@ -62,7 +62,7 @@ function render_block_core_comment_author_avatar( $attributes, $content, $block
 		)
 	);
 	if ( isset( $spacing_attributes ) ) {
-		return sprintf( '<div style="%1s">%2s</div>', $spacing_string, $avatar_block );
+		return sprintf( '<div style="%1s">%2s</div>', esc_attr( $spacing_string ), $avatar_block );
 	}
 	return sprintf( '<div>%1s</div>', $avatar_block );
 }