Editor: Bump @WordPress packages for 5.4.12.

Package updates for bug fixes:

* @wordpress/block-library: 2.14.11
* @wordpress/edit-post: 3.13.13

git-svn-id: https://develop.svn.wordpress.org/branches/5.4@54574 602fd350-edb4-49c9-b593-d223f7449a82

Author: desrosj

package-lock.json

@@ -79,7 +79,7 @@
 		"@wordpress/blob": "2.7.0",
 		"@wordpress/block-directory": "1.5.9",
 		"@wordpress/block-editor": "3.7.9",
-		"@wordpress/block-library": "2.14.10",
+		"@wordpress/block-library": "2.14.11",
 		"@wordpress/block-serialization-default-parser": "3.5.0",
 		"@wordpress/blocks": "6.12.4",
 		"@wordpress/components": "9.2.7",
@@ -91,7 +91,7 @@
 		"@wordpress/deprecated": "2.7.0",
 		"@wordpress/dom": "2.8.1",
 		"@wordpress/dom-ready": "2.7.0",
-		"@wordpress/edit-post": "3.13.12",
+		"@wordpress/edit-post": "3.13.13",
 		"@wordpress/editor": "9.12.9",
 		"@wordpress/element": "2.11.0",
 		"@wordpress/escape-html": "1.7.0",

package.json

@@ -16,7 +16,7 @@ function render_block_core_rss( $attributes ) {
 	$rss = fetch_feed( $attributes['feedURL'] );
 
 	if ( is_wp_error( $rss ) ) {
-		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . $rss->get_error_message() . '</div></div>';
+		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . esc_html( $rss->get_error_message() ) . '</div></div>';
 	}
 
 	if ( ! $rss->get_item_quantity() ) {
@@ -44,8 +44,8 @@ function render_block_core_rss( $attributes ) {
 			if ( $date ) {
 				$date = sprintf(
 					'<time datetime="%1$s" class="wp-block-rss__item-publish-date">%2$s</time> ',
-					date_i18n( get_option( 'c' ), $date ),
-					date_i18n( get_option( 'date_format' ), $date )
+					esc_attr( date_i18n( get_option( 'c' ), $date ) ),
+					esc_attr( date_i18n( get_option( 'date_format' ), $date ) )
 				);
 			}
 		}