WordPress.org
Get WordPress

Plugin Directory

Changeset 3388141


Ignore:
Timestamp:
11/01/2025 03:00:32 PM (5 months ago)
Author:
bdevs
Message:

Fixed form data render in frontend builder func

Location:
generic-elements-for-elementor
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • generic-elements-for-elementor/tags/1.2.7/admin/classes/Admin.php

    r3387897 r3388141  
    457457    {
    458458        $content = self::$elementor_instance->frontend->get_builder_content_for_display(get_generic_el_header_id());
    459         echo wp_kses_post( $content );
     459        // Elementor content is already sanitized and escaped internally.
     460        // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     461        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     462        echo $content;
    460463    }
    461464
    … …  
    467470    {
    468471        $content = self::$elementor_instance->frontend->get_builder_content_for_display(get_generic_el_footer_id());
    469         echo wp_kses_post( $content );
     472        // Elementor content is already sanitized and escaped internally.
     473        // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     474        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     475        echo $content;
    470476    }
    471477

  • generic-elements-for-elementor/tags/1.2.7/admin/classes/TemplateGenerator.php

    r3387897 r3388141  
    4141        if (did_action('elementor/loaded')) {
    4242            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_header_id());
    43             echo wp_kses_post( $content );
     43            // Elementor content is already sanitized and escaped internally.
     44            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     45            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     46            echo $content;
    4447        }
    4548    }
    … …  
    117120        if (did_action('elementor/loaded')) {
    118121            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_breadcrumb_id());
    119             echo wp_kses_post( $content );
     122            // Elementor content is already sanitized and escaped internally.
     123            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     124            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     125            echo $content;
    120126        }
    121127    }
    … …  
    180186        if (did_action('elementor/loaded')) {
    181187            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_footer_id());
    182             echo wp_kses_post( $content );
     188            // Elementor content is already sanitized and escaped internally.
     189            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     190            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     191            echo $content;
    183192        }
    184193    }

  • generic-elements-for-elementor/trunk/admin/classes/Admin.php

    r3384521 r3388141  
    457457    {
    458458        $content = self::$elementor_instance->frontend->get_builder_content_for_display(get_generic_el_header_id());
    459         echo wp_kses_post( $content );
     459        // Elementor content is already sanitized and escaped internally.
     460        // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     461        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     462        echo $content;
    460463    }
    461464
    … …  
    467470    {
    468471        $content = self::$elementor_instance->frontend->get_builder_content_for_display(get_generic_el_footer_id());
    469         echo wp_kses_post( $content );
     472        // Elementor content is already sanitized and escaped internally.
     473        // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     474        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     475        echo $content;
    470476    }
    471477

  • generic-elements-for-elementor/trunk/admin/classes/TemplateGenerator.php

    r3384521 r3388141  
    4141        if (did_action('elementor/loaded')) {
    4242            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_header_id());
    43             echo wp_kses_post( $content );
     43            // Elementor content is already sanitized and escaped internally.
     44            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     45            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     46            echo $content;
    4447        }
    4548    }
    … …  
    117120        if (did_action('elementor/loaded')) {
    118121            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_breadcrumb_id());
    119             echo wp_kses_post( $content );
     122            // Elementor content is already sanitized and escaped internally.
     123            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     124            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     125            echo $content;
    120126        }
    121127    }
    … …  
    180186        if (did_action('elementor/loaded')) {
    181187            $content = \Elementor\Plugin::$instance->frontend->get_builder_content(self::get_footer_id());
    182             echo wp_kses_post( $content );
     188            // Elementor content is already sanitized and escaped internally.
     189            // Using wp_kses_post() here would strip valid HTML (e.g., <form>, <input>).
     190            // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     191            echo $content;
    183192        }
    184193    }
Note: See TracChangeset for help on using the changeset viewer.