From 4f42fa86a33cceaf3d39443611a4548d3485e882 Mon Sep 17 00:00:00 2001
From: Rostislav Wolny <rosta.wolny@automattic.com>
Date: Mon, 17 Apr 2023 09:13:33 +0200
Subject: [PATCH] Use proper escaping function in option inner html

[MAILPOET-5233]
---
 mailpoet/lib/Form/Block/Select.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mailpoet/lib/Form/Block/Select.php b/mailpoet/lib/Form/Block/Select.php
index affec1e9b7..e7539900f7 100644
--- a/mailpoet/lib/Form/Block/Select.php
+++ b/mailpoet/lib/Form/Block/Select.php
@@ -51,7 +51,7 @@ class Select {
       if (!empty($block['params']['required'])) {
         $label .= ' *';
       }
-      $html .= '<option value="" disabled selected hidden>' . $this->wp->escAttr($label) . '</option>';
+      $html .= '<option value="" disabled selected hidden>' . $this->wp->escHtml($label) . '</option>';
     } else {
       if (empty($block['params']['required'])) {
         $html .= '<option value="">-</option>';