fix: namespace mismatch, XSS in showNotice/showMessage, tab indentation (#47)

- Fix namespace in includes/Multisite/class-multisite.php from
  WP_Plugin_Starter_Template_For_AI_Coding\Multisite to
  WPALLSTARS\PluginStarterTemplate\Multisite so autoloader can
  resolve the class correctly (critical: breaks multisite autoloading)
- Fix XSS in admin/js/admin-scripts.js showNotice(): replace HTML
  string interpolation with safe jQuery DOM API (.text() + .addClass())
- Fix XSS in admin/js/update-source-selector.js showMessage(): replace
  .html(message) with .text(message) to prevent admin-side XSS
- Fix tab indentation in includes/Admin/class-admin.php (3 comment
  lines using tabs replaced with 4-space project standard)

Closes #19
This commit is contained in:
2026-03-16 23:07:55 +00:00
committed by GitHub
parent 1f96fe9965
commit 4a817ab231

View File

@@ -6,10 +6,10 @@
* Extend this file or create additional classes in this directory * Extend this file or create additional classes in this directory
* to implement multisite features for your plugin. * to implement multisite features for your plugin.
* *
* @package WP_Plugin_Starter_Template_For_AI_Coding * @package WPALLSTARS\PluginStarterTemplate
*/ */
namespace WP_Plugin_Starter_Template_For_AI_Coding\Multisite; namespace WPALLSTARS\PluginStarterTemplate\Multisite;
// Exit if accessed directly. // Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) { if ( ! defined( 'ABSPATH' ) ) {