wpallstars/wp-multisite-waas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove overzealous escaping

Browse Source
This commit is contained in:
David Stone
2025-04-07 09:47:01 -06:00
parent 816abe7360
commit d86e54544b
7 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
views/base/centered.php
View File

@ -108,7 +108,7 @@
<div class="inside"> <div class="inside">
<?php echo wp_kses_post($content); ?> <?php echo $content; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</div> </div>

2
views/dashboard-statistics/widget-forms.php
View File

@ -61,7 +61,7 @@
<td> <td>
<?php echo esc_html($form->signup_form); ?> <?php echo esc_html($form->signup_form); ?>
<?php if ('by-admin' === $form->signup_form) : ?> <?php if ('by-admin' === $form->signup_form) : ?>
<?php echo wp_kses_post(wu_tooltip(__('Customers created via the admin panel, by super admins.', 'wp-multisite-waas'))); ?> <?php echo wu_tooltip(__('Customers created via the admin panel, by super admins.', 'wp-multisite-waas')); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
<?php endif; ?> <?php endif; ?>
</td> </td>
<td class="wu-text-right"><?php echo intval($form->count); ?></td> <!-- Ensure count is an integer and properly escaped --> <td class="wu-text-right"><?php echo intval($form->count); ?></td> <!-- Ensure count is an integer and properly escaped -->

2
views/events/widget-message.php
View File

@ -12,7 +12,7 @@
<h3 class="wu-my-1 wu-text-2xs wu-uppercase"><?php echo esc_html__('Message', 'wp-multisite-waas'); ?></h3> <h3 class="wu-my-1 wu-text-2xs wu-uppercase"><?php echo esc_html__('Message', 'wp-multisite-waas'); ?></h3>
<span class="wu-my-1 wu-inline-block"> <span class="wu-my-1 wu-inline-block">
<?php echo wp_kses_post($object->get_message()); ?> <?php echo $object->get_message(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</span> </span>
</li> </li>

4
views/invoice/template.php
View File

@ -185,7 +185,7 @@ $has_tax_included = false;
/** /**
* Displays the company address. * Displays the company address.
*/ */
echo wp_kses(nl2br($company_address), array('br' => array())); echo nl2br(esc_html($company_address), array('br' => array()));
?> ?>
</td> </td>
@ -198,7 +198,7 @@ $has_tax_included = false;
/** /**
* Displays the clients address. * Displays the clients address.
*/ */
echo wp_kses(nl2br(implode(PHP_EOL, (array) $billing_address)), array('br' => array())); echo nl2br(esc_html(implode(PHP_EOL, (array) $billing_address)), array('br' => array()));
?> ?>

4
views/settings/fields/field-text.php
View File

@ -25,7 +25,7 @@
<?php if (isset($field->append) && ! empty($field->append)) : ?> <?php if (isset($field->append) && ! empty($field->append)) : ?>
<?php echo wp_kses_post($field->append); ?> <?php echo $field->append; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
<?php endif; ?> <?php endif; ?>
@ -33,7 +33,7 @@
<p class="description" id="<?php echo esc_attr($field->id); ?>-desc"> <p class="description" id="<?php echo esc_attr($field->id); ?>-desc">
<?php echo $field->desc; ?> <?php echo $field->desc; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</p> </p>

4
views/shortcodes/shortcodes.php
View File

@ -34,7 +34,7 @@
<?php echo esc_html($shortcode['title']); ?> <code>[<?php echo esc_html($shortcode['shortcode']); ?>]</code> <?php echo esc_html($shortcode['title']); ?> <code>[<?php echo esc_html($shortcode['shortcode']); ?>]</code>
</h3> </h3>
<p class="wu-mt-1 wu-mb-0 wu-text-gray-700"> <p class="wu-mt-1 wu-mb-0 wu-text-gray-700">
<?php echo wp_kses_post($shortcode['description']); ?> <?php echo $shortcode['description']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</p> </p>
</div> </div>
</div> </div>
@ -61,7 +61,7 @@
<?php echo esc_html($param); ?> <?php echo esc_html($param); ?>
</td> </td>
<td class="wu-px-4 wu-py-2 wu-text-left"> <td class="wu-px-4 wu-py-2 wu-text-left">
<?php echo wp_kses_post($value['desc']); ?> <?php echo $value['desc']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</td> </td>
<td class="wu-px-4 wu-py-2 wu-text-left"> <td class="wu-px-4 wu-py-2 wu-text-left">
<?php echo esc_html($value['options']); ?> <?php echo esc_html($value['options']); ?>

2
views/wizards/host-integrations/activation.php
View File

@ -10,7 +10,7 @@
</h1> </h1>
<p class="wu-text-lg wu-text-gray-600 wu-my-4"> <p class="wu-text-lg wu-text-gray-600 wu-my-4">
<?php echo wp_kses_post($integration->get_description()); ?> <?php echo $integration->get_description(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
</p> </p>
<div class="wu-bg-white wu-p-4 wu--mx-6"> <div class="wu-bg-white wu-p-4 wu--mx-6">