diff --git a/wp-includes/html-api/class-wp-html-tag-processor.php b/wp-includes/html-api/class-wp-html-tag-processor.php
index c619806525..5e2ee114ae 100644
--- a/wp-includes/html-api/class-wp-html-tag-processor.php
+++ b/wp-includes/html-api/class-wp-html-tag-processor.php
@@ -3197,6 +3197,12 @@ class WP_HTML_Tag_Processor {
* @see https://html.spec.whatwg.org/#attributes-3
*/
$escaped_new_value = in_array( $comparable_name, wp_kses_uri_attributes() ) ? esc_url( $value ) : esc_attr( $value );
+
+ // If the escaping functions wiped out the update, reject it and indicate it was rejected.
+ if ( '' === $escaped_new_value && '' !== $value ) {
+ return false;
+ }
+
$updated_attribute = "{$name}=\"{$escaped_new_value}\"";
}
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 0cc490f4b3..98585627f6 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
*
* @global string $wp_version
*/
-$wp_version = '6.7-alpha-58843';
+$wp_version = '6.7-alpha-58844';
/**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.