` * when the block body contains no `>`, so a snippet containing `>`, `=>` or `->` would * otherwise have its opening tag consumed as a malformed HTML tag and the remaining * source code — potentially including credentials — printed to visitors. * * Script bodies are left visible on purpose: wp_kses_post() drops the `