Editor: Bump @WordPress packages for 5.3.14.

Package updates for bug fixes:

* @wordpress/block-library: 2.9.13
* @wordpress/edit-post: 3.8.13

git-svn-id: https://develop.svn.wordpress.org/branches/5.3@54598 602fd350-edb4-49c9-b593-d223f7449a82

Author: desrosj

package-lock.json

@@ -77,7 +77,7 @@
 		"@wordpress/autop": "2.5.1",
 		"@wordpress/blob": "2.5.1",
 		"@wordpress/block-editor": "3.2.7",
-		"@wordpress/block-library": "2.9.12",
+		"@wordpress/block-library": "2.9.13",
 		"@wordpress/block-serialization-default-parser": "3.4.1",
 		"@wordpress/blocks": "6.7.3",
 		"@wordpress/components": "8.3.4",
@@ -89,7 +89,7 @@
 		"@wordpress/deprecated": "2.6.1",
 		"@wordpress/dom": "2.5.3",
 		"@wordpress/dom-ready": "2.5.1",
-		"@wordpress/edit-post": "3.8.12",
+		"@wordpress/edit-post": "3.8.13",
 		"@wordpress/editor": "9.7.9",
 		"@wordpress/element": "2.8.2",
 		"@wordpress/escape-html": "1.5.1",

package.json

@@ -16,7 +16,7 @@ function render_block_core_rss( $attributes ) {
 	$rss = fetch_feed( $attributes['feedURL'] );
 
 	if ( is_wp_error( $rss ) ) {
-		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . $rss->get_error_message() . '</div></div>';
+		return '<div class="components-placeholder"><div class="notice notice-error"><strong>' . __( 'RSS Error:' ) . '</strong> ' . esc_html( $rss->get_error_message() ) . '</div></div>';
 	}
 
 	if ( ! $rss->get_item_quantity() ) {
@@ -48,8 +48,8 @@ function render_block_core_rss( $attributes ) {
 			if ( $date ) {
 				$date = sprintf(
 					'<time datetime="%1$s" class="wp-block-rss__item-publish-date">%2$s</time> ',
-					date_i18n( get_option( 'c' ), $date ),
-					date_i18n( get_option( 'date_format' ), $date )
+					esc_attr( date_i18n( get_option( 'c' ), $date ) ),
+					esc_attr( date_i18n( get_option( 'date_format' ), $date ) )
 				);
 			}
 		}