Customizer: Prevent double-encoding in `WP_Customize_Control`.

Control's label and description may include HTML.

fixes #29572.
Built from https://develop.svn.wordpress.org/trunk@30326


git-svn-id: http://core.svn.wordpress.org/trunk@30325 1a063a9b-81f0-0310-95a4-ce76da25c4cd

wp-includes/class-wp-customize-control.php

@@ -616,10 +616,10 @@ class WP_Customize_Color_Control extends WP_Customize_Control {
 		} #>
 		<label>
 			<# if ( data.label ) { #>
-				<span class="customize-control-title">{{ data.label }}</span>
+				<span class="customize-control-title">{{{ data.label }}}</span>
 			<# } #>
 			<# if ( data.description ) { #>
-				<span class="description customize-control-description">{{ data.description }}</span>
+				<span class="description customize-control-description">{{{ data.description }}}</span>
 			<# } #>
 			<div class="customize-control-content">
 				<input class="color-picker-hex" type="text" maxlength="7" placeholder="<?php esc_attr_e( 'Hex Value' ); ?>" {{ defaultValue }} />

wp-includes/version.php

@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.1-alpha-30325';
+$wp_version = '4.1-alpha-30326';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.