Late escape Latest Posts block

[getdave]

Description

This is not a security problem. This PR simply moves escaping of all PHP output to be as "late" as possible. This means we avoid escaping variables until they are output in the HTML markup.

This is a WP Core best practice.

How has this been tested?

• add Latest Posts block
• check functionality is "as was"
• check all tests pass.

Screenshots

Types of changes

Bug fix (non-breaking change which fixes an issue)

Checklist:

• My code is tested.
• My code follows the WordPress code style.
• My code follows the accessibility standards.
• I've tested my changes with keyboard and screen readers.
• My code has proper inline documentation.
• I've included developer documentation if appropriate.
• I've updated all React Native files affected by any refactorings/renamings in this PR (please manually search all *.native.js files for terms that need renaming or removal).
• I've updated related schemas if appropriate.

[getdave]

Ok this is RfR.

[TimothyBJacobs]

It's valid for get_the_title to contain HTML which this looks to prevent.

[getdave]

It's valid for get_the_title to contain HTML which this looks to prevent.

@TimothyBJacobs Fix for review #38145