saly

escaping HTML solved the problem for me

esc_html()

case 'code';
				$html = sprintf('<!-- wp:code --><pre class="bfe-code wp-block-code"><code>%s</code></pre><!-- /wp:code -->', esc_html($data['code']));

also users can simply execute PHP code on submit
here an example on your demo site
users can simply execute code

sure!
screenshot

after I deactivated plugins it works just fine, I believe the error is from other plugins.

sorry if I made you create a bug for nothing.

Thank you but my site still on localhost

Every time I update the edited post, another post is created.
I don’t know if this could be the Error this:
<div class="bfe-editor" id="bfe-editor" post_id="<?= $post_id ?>" editor_post_id="<?= get_the_ID() ?>"> somehow the ID returns 0

• This reply was modified 3 years, 12 months ago by saly.

sorry problem solved