diff --git a/views/base/centered.php b/views/base/centered.php index f112f4f..38fe665 100644 --- a/views/base/centered.php +++ b/views/base/centered.php @@ -108,7 +108,7 @@
- +
diff --git a/views/dashboard-statistics/widget-forms.php b/views/dashboard-statistics/widget-forms.php index 5befb81..e026c09 100644 --- a/views/dashboard-statistics/widget-forms.php +++ b/views/dashboard-statistics/widget-forms.php @@ -61,7 +61,7 @@ signup_form); ?> signup_form) : ?> - + count); ?> diff --git a/views/events/widget-message.php b/views/events/widget-message.php index 4d1fe46..252c6ec 100644 --- a/views/events/widget-message.php +++ b/views/events/widget-message.php @@ -12,7 +12,7 @@

- get_message()); ?> + get_message(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> diff --git a/views/invoice/template.php b/views/invoice/template.php index 29743cc..ce7c652 100644 --- a/views/invoice/template.php +++ b/views/invoice/template.php @@ -185,7 +185,7 @@ $has_tax_included = false; /** * Displays the company address. */ - echo wp_kses(nl2br($company_address), array('br' => array())); + echo nl2br(esc_html($company_address), array('br' => array())); ?> @@ -198,7 +198,7 @@ $has_tax_included = false; /** * Displays the clients address. */ - echo wp_kses(nl2br(implode(PHP_EOL, (array) $billing_address)), array('br' => array())); + echo nl2br(esc_html(implode(PHP_EOL, (array) $billing_address)), array('br' => array())); ?> diff --git a/views/settings/fields/field-text.php b/views/settings/fields/field-text.php index f928ffd..82e8b44 100644 --- a/views/settings/fields/field-text.php +++ b/views/settings/fields/field-text.php @@ -25,7 +25,7 @@ append) && ! empty($field->append)) : ?> - append); ?> + append; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> @@ -33,7 +33,7 @@

- desc; ?> + desc; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>

diff --git a/views/shortcodes/shortcodes.php b/views/shortcodes/shortcodes.php index 7913183..0c76cfc 100644 --- a/views/shortcodes/shortcodes.php +++ b/views/shortcodes/shortcodes.php @@ -34,7 +34,7 @@ []

- +

@@ -61,7 +61,7 @@ - + diff --git a/views/wizards/host-integrations/activation.php b/views/wizards/host-integrations/activation.php index cfe8b4f..6886c5d 100644 --- a/views/wizards/host-integrations/activation.php +++ b/views/wizards/host-integrations/activation.php @@ -10,7 +10,7 @@

- get_description()); ?> + get_description(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>