Changeset 3248641
- Timestamp:
- 02/28/2025 05:40:33 PM (12 months ago)
- Location:
- favorites/trunk
- Files:
-
- 4 edited
-
app/Config/SettingsRepository.php (modified) (5 diffs)
-
app/Favorites.php (modified) (1 diff)
-
favorites.php (modified) (2 diffs)
-
readme.txt (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
favorites/trunk/app/Config/SettingsRepository.php
r2002493 r3248641 183 183 if ( !isset($option['buttontext']) || $option['buttontext'] == "" ) 184 184 return __('Favorite', 'favorites'); 185 return esc_html($option['buttontext']);185 return $this->sanitizeOutput($option['buttontext']); 186 186 } 187 187 … … 195 195 if ( !isset($option['buttontextfavorited']) || $option['buttontextfavorited'] == "" ) 196 196 return __('Favorited', 'favorites'); 197 return esc_html($option['buttontextfavorited']);197 return $this->sanitizeOutput($option['buttontextfavorited']); 198 198 } 199 199 … … 207 207 if ( !isset($option['clearfavorites']) || $option['clearfavorites'] == "" ) 208 208 return __('Clear Favorites', 'favorites'); 209 return esc_html($option['clearfavorites']);209 return $this->sanitizeOutput($option['clearfavorites']); 210 210 } 211 211 … … 266 266 { 267 267 $option = get_option('simplefavorites_display'); 268 return ( isset($option['loadingindicator']['text']) ) ? esc_html($option['loadingindicator']['text']) : __('Loading', 'favorites');268 return ( isset($option['loadingindicator']['text']) ) ? $this->sanitizeOutput($option['loadingindicator']['text']) : __('Loading', 'favorites'); 269 269 } 270 270 … … 532 532 return ( isset($option[$setting]) ) ? $option[$setting] : false; 533 533 } 534 535 private function sanitizeOutput($output) 536 { 537 $allowed = [ 538 'i' => [ 539 'class' => true, 540 ], 541 'img' => [ 542 'class' => true, 543 'src' => true, 544 ], 545 'p' => [ 546 'class' => true 547 ], 548 'strong' => [] 549 ]; 550 $output = wp_kses($output, $allowed); 551 return $output; 552 } 534 553 } -
favorites/trunk/app/Favorites.php
r3061244 r3248641 13 13 14 14 global $favorites_version; 15 $favorites_version = '2.3. 4';15 $favorites_version = '2.3.5'; 16 16 17 17 global $favorites_name; -
favorites/trunk/favorites.php
r3061244 r3248641 4 4 Plugin URI: http://favoriteposts.com 5 5 Description: Simple and flexible favorite buttons for any post type. 6 Version: 2.3. 46 Version: 2.3.5 7 7 Author: Kyle Phillips 8 8 Author URI: https://github.com/kylephillips … … 13 13 */ 14 14 15 /* Copyright 202 3Kyle Phillips15 /* Copyright 2025 Kyle Phillips 16 16 17 17 This program is free software; you can redistribute it and/or modify -
favorites/trunk/readme.txt
r3207775 r3248641 81 81 82 82 == Changelog == 83 84 = 2.3.5 = 85 * Security update 83 86 84 87 = 2.3.4 =
Note: See TracChangeset
for help on using the changeset viewer.