From 9c6b323976371e8ca107789d93b1e8d9426272bc Mon Sep 17 00:00:00 2001
From: "Dominik Schilling (ocean90)" <ocean90@git.wordpress.org>
Date: Thu, 13 Nov 2014 11:43:06 +0000
Subject: [PATCH] Customizer: Prevent double-encoding in
 `WP_Customize_Control`.

Control's label and description may include HTML.

fixes #29572.

git-svn-id: https://develop.svn.wordpress.org/trunk@30326 602fd350-edb4-49c9-b593-d223f7449a82
---
 src/wp-includes/class-wp-customize-control.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/wp-includes/class-wp-customize-control.php b/src/wp-includes/class-wp-customize-control.php
index 49dcdc1e86..f496f009fb 100644
--- a/src/wp-includes/class-wp-customize-control.php
+++ b/src/wp-includes/class-wp-customize-control.php
@@ -616,10 +616,10 @@ class WP_Customize_Color_Control extends WP_Customize_Control {
 		} #>
 		<label>
 			<# if ( data.label ) { #>
-				<span class="customize-control-title">{{ data.label }}</span>
+				<span class="customize-control-title">{{{ data.label }}}</span>
 			<# } #>
 			<# if ( data.description ) { #>
-				<span class="description customize-control-description">{{ data.description }}</span>
+				<span class="description customize-control-description">{{{ data.description }}}</span>
 			<# } #>
 			<div class="customize-control-content">
 				<input class="color-picker-hex" type="text" maxlength="7" placeholder="<?php esc_attr_e( 'Hex Value' ); ?>" {{ defaultValue }} />