WordPress.org
Get WordPress

Plugin Directory

Changeset 3172016


Ignore:
Timestamp:
10/19/2024 03:25:08 PM (17 months ago)
Author:
ali7ali
Message:

Security enhancements and code refactoring

File:
1 edited

Legend:

Unmodified
Added
Removed

  • alpha-price-table-for-elementor/trunk/includes/class-alpha-price-table-widget.php

    r3169944 r3172016  
    796796
    797797        $migration_allowed = Icons_Manager::is_migration_allowed();
     798
     799        $allowed_tags = [
     800            'h2' => [],
     801            'h3' => [],
     802            'h4' => [],
     803            'h5' => [],
     804            'h6' => [],
     805        ];
    798806?>
    799807
    … …  
    802810                <div class="elementor-price-table__header">
    803811                    <?php if (! empty($settings['heading'])) : ?>
    804                         <<?php echo esc_attr($settings['heading_tag']); ?> <?php echo wp_kses_post($this->get_render_attribute_string('heading')); ?>>
     812                        <<?php echo wp_kses($settings['heading_tag'], $allowed_tags); ?> <?php echo wp_kses_post($this->get_render_attribute_string('heading')); ?>>
    805813                            <?php echo wp_kses_post($settings['heading']); ?>
    806                         </<?php echo esc_attr($settings['heading_tag']); ?>>
     814                        </<?php echo wp_kses($settings['heading_tag'], $allowed_tags); ?>>
    807815                    <?php endif; ?>
    808816
Note: See TracChangeset for help on using the changeset viewer.