add extra block classname escaping

Author: nerrad

src/BlockTypes/FeaturedCategory.php

@@ -64,7 +64,7 @@ public function render( $attributes = array(), $content = '' ) {
 			wc_format_content( $category->description )
 		);
 
-		$output = sprintf( '<div class="%1$s" style="%2$s">', $this->get_classes( $attributes ), $this->get_styles( $attributes, $category ) );
+		$output = sprintf( '<div class="%1$s" style="%2$s">', esc_attr( $this->get_classes( $attributes ) ), esc_attr( $this->get_styles( $attributes, $category ) ) );
 
 		$output .= $title;
 		if ( $attributes['showDesc'] ) {

src/BlockTypes/FeaturedProduct.php

@@ -77,7 +77,7 @@ public function render( $attributes = array(), $content = '' ) {
 			$product->get_price_html()
 		);
 
-		$output = sprintf( '<div class="%1$s" style="%2$s">', $this->get_classes( $attributes ), $this->get_styles( $attributes, $product ) );
+		$output = sprintf( '<div class="%1$s" style="%2$s">', esc_attr( $this->get_classes( $attributes ) ), esc_attr( $this->get_styles( $attributes, $product ) ) );
 
 		$output .= $title;
 		if ( $attributes['showDesc'] ) {