WordPress.org
Get WordPress

Plugin Directory

Changeset 3449861


Ignore:
Timestamp:
01/29/2026 05:22:15 PM (5 weeks ago)
Author:
freemp
Message:

Using esc_attr() for style and esc_html() for message text.

File:
1 edited

Legend:

Unmodified
Added
Removed

  • javascript-notifier/trunk/javascript-notifier.php

    r3449320 r3449861  
    7373        $settings = get_option( 'javascript_notifier_settings' );
    7474        $block = $settings['block'] ?? '';
    75         $style = 'style="background-color:' . $settings['bg_color'] . ';color:' . $settings['fg_color'] . ';font-size:' . $settings['font_size'] . '%;opacity:' . $settings['opacity'] . ';' . $settings['custom_css'] . '"';
     75        $style = esc_attr( 'background-color:' . $settings['bg_color'] . ';color:' . $settings['fg_color'] . ';font-size:' . $settings['font_size'] . '%;opacity:' . $settings['opacity'] . ';' . $settings['custom_css'] );
    7676?>
    7777<!-- JavaScript Notifier -->
    78 <?php if( $block ) : ?><div class="javascript_notifier" id="javascript_notifier_block" <?php echo esc_attr( $style ); ?>><div id="javascript_notifier_block_2"><div id="javascript_notifier_block_3"><?php else : ?><div class="javascript_notifier" id="javascript_notifier_bar" <?php echo esc_attr( $style ); ?>><?php endif; ?><strong><?php echo esc_attr( $settings['message'] ); ?></strong></div><?php if( $block ) : ?></div></div><?php endif; ?>
     78<?php if( $block ) : ?><div class="javascript_notifier" id="javascript_notifier_block" style="<?php echo $style; ?>"><div id="javascript_notifier_block_2"><div id="javascript_notifier_block_3"><?php else : ?><div class="javascript_notifier" id="javascript_notifier_bar" style="<?php echo $style; ?>"><?php endif; ?><strong><?php echo esc_html( $settings['message'] ); ?></strong></div><?php if( $block ) : ?></div></div><?php endif; ?>
    7979<script id="hide-javascript-notifier-js" type="application/javascript">
    8080document.getElementById('javascript_notifier_<?php echo( $block ? 'block' : 'bar' ); ?>').style.setProperty('display', 'none', 'important');
Note: See TracChangeset for help on using the changeset viewer.