Merge pull request #788 from Automattic/fix/541-mustache-sub-issue-gb-vs-curlies

Author: GaryJones

WordPressVIPMinimum/Sniffs/Security/MustacheSniff.php

@@ -45,7 +45,7 @@ public function register() {
 	 */
 	public function process_token( $stackPtr ) {
 
-		if ( strpos( $this->tokens[ $stackPtr ]['content'], '{{{' ) !== false || strpos( $this->tokens[ $stackPtr ]['content'], '}}}' ) !== false ) {
+		if ( strpos( $this->tokens[ $stackPtr ]['content'], '{{{' ) !== false && strpos( $this->tokens[ $stackPtr ]['content'], '}}}' ) !== false ) {
 			// Mustache unescaped output notation.
 			$message = 'Found Mustache unescaped output notation: "{{{}}}".';
 			$this->phpcsFile->addWarning( $message, $stackPtr, 'OutputNotation' );

WordPressVIPMinimum/Tests/Security/MustacheUnitTest.inc

@@ -17,4 +17,7 @@ echo '<a href="{{href}}">{{&data}}</div></a>'; // NOK: data.
 
 		return new Handlebars.SafeString(result); // NOK: SafeString.
 	});
-</script>
+</script>
+
+// Issue 541#issuecomment-1692323177: don't flag GB syntax.
+<div class="wp-block-group"><!-- wp:heading {"textAlign":"center","style":{"spacing":{"margin":{"top":"0","right":"0","bottom":"var:preset|spacing|medium","left":"0"}}}} --><!-- OK. -->