@@ -32,7 +32,7 @@ function render_block_core_post_author_name( $attributes, $content, $block ) {
 
 	$author_name = get_the_author_meta( 'display_name', $author_id );
 	if ( isset( $attributes['isLink'] ) && $attributes['isLink'] ) {
-		$author_name = sprintf( '<a href="%1$s" target="%2$s" class="wp-block-post-author-name__link">%3$s</a>', get_author_posts_url( $author_id ), esc_attr( $attributes['linkTarget'] ), $author_name );
+		$author_name = sprintf( '<a href="%1$s" target="%2$s" class="wp-block-post-author-name__link">%3$s</a>', esc_url( get_author_posts_url( $author_id ) ), esc_attr( $attributes['linkTarget'] ), $author_name );
 	}
 
 	$classes = array();
 
@@ -84,7 +84,7 @@ function render_block_core_post_date( $attributes, $content, $block ) {
 	$time_tag = sprintf( '<time datetime="%1$s">%2$s</time>', $unformatted_date, $formatted_date );
 
 	if ( isset( $attributes['isLink'] ) && $attributes['isLink'] && isset( $block->context['postId'] ) ) {
-		$time_tag = sprintf( '<a href="%1s">%2s</a>', get_the_permalink( $block->context['postId'] ), $time_tag );
+		$time_tag = sprintf( '<a href="%1s">%2s</a>', esc_url( get_the_permalink( $block->context['postId'] ) ), $time_tag );
 	}
 
 	return sprintf( '<div %1$s>%2$s</div>', $wrapper_attributes, $time_tag );
 
@@ -104,7 +104,7 @@ function render_block_core_post_featured_image( $attributes, $content, $block )
 		$height         = ! empty( $attributes['height'] ) ? 'style="' . esc_attr( safecss_filter_attr( 'height:' . $attributes['height'] ) ) . '"' : '';
 		$featured_image = sprintf(
 			'<a href="%1$s" target="%2$s" %3$s %4$s>%5$s%6$s</a>',
-			get_the_permalink( $post_ID ),
+			esc_url( get_the_permalink( $post_ID ) ),
 			esc_attr( $link_target ),
 			$rel,
 			$height,
 
@@ -40,7 +40,7 @@ function render_block_core_read_more( $attributes, $content, $block ) {
 	return sprintf(
 		'<a %1s href="%2s" target="%3s">%4s<span class="screen-reader-text">%5s</span></a>',
 		$wrapper_attributes,
-		get_the_permalink( $post_ID ),
+		esc_url( get_the_permalink( $post_ID ) ),
 		esc_attr( $attributes['linkTarget'] ),
 		$more_text,
 		$screen_reader_text
Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ function render_block_core_post_author_name( $attributes, $content, $block ) {`
`32`	`32`
`33`	`33`	`$author_name = get_the_author_meta( 'display_name', $author_id );`
`34`	`34`	`if ( isset( $attributes['isLink'] ) && $attributes['isLink'] ) {`
`35`		`- $author_name = sprintf( '<a href="%1$s" target="%2$s" class="wp-block-post-author-name__link">%3$s</a>', get_author_posts_url( $author_id ), esc_attr( $attributes['linkTarget'] ), $author_name );`
	`35`	`+ $author_name = sprintf( '<a href="%1$s" target="%2$s" class="wp-block-post-author-name__link">%3$s</a>', esc_url( get_author_posts_url( $author_id ) ), esc_attr( $attributes['linkTarget'] ), $author_name );`
`36`	`36`	`}`
`37`	`37`
`38`	`38`	`$classes = array();`
Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,7 @@ function render_block_core_post_date( $attributes, $content, $block ) {`
`84`	`84`	`$time_tag = sprintf( '<time datetime="%1$s">%2$s</time>', $unformatted_date, $formatted_date );`
`85`	`85`
`86`	`86`	`if ( isset( $attributes['isLink'] ) && $attributes['isLink'] && isset( $block->context['postId'] ) ) {`
`87`		`- $time_tag = sprintf( '<a href="%1s">%2s</a>', get_the_permalink( $block->context['postId'] ), $time_tag );`
	`87`	`+ $time_tag = sprintf( '<a href="%1s">%2s</a>', esc_url( get_the_permalink( $block->context['postId'] ) ), $time_tag );`
`88`	`88`	`}`
`89`	`89`
`90`	`90`	`return sprintf( '<div %1$s>%2$s</div>', $wrapper_attributes, $time_tag );`