Plugin Directory

Changeset 942262


Ignore:
Timestamp:
07/02/2014 04:14:50 PM (12 years ago)
Author:
dxw
Message:

Escaping a variable which was missed

Location:
dxw-security/trunk/lib
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • dxw-security/trunk/lib/api.class.php

    r942260 r942262  
    7878          $parsed_body = $this->parse_response_body($response['body']);
    7979          $data = $this->extract_data($parsed_body);
     80          // TODO: Validate data and raise an error if it's invalid. Children of this class would need to implement a 'validate()' function
    8081          $this->cache_api_data($data);
    8182          return $data;
  • dxw-security/trunk/lib/plugin_recommendation.class.php

    r934571 r942262  
    1818    $this->body = $body; // Legitimately includes html - defined in this file
    1919    $this->review_data = $review_data;
    20     $this->heading = $heading;
     20    $this->heading = $heading; // Legitimately includes html - defined within the code of this plugin
    2121    $this->dialog_intro = $dialog_intro;
    2222  }
  • dxw-security/trunk/lib/review_data.class.php

    r934571 r942262  
    9090      ?>
    9191        <div class="other-review <?php echo $review->slug ?>">
    92           <h2>Version <?php echo $review->version(); if ($review->version_matches($this->latest_version)) { echo " (Latest)"; }?></h2>
     92          <h2>Version <?php echo esc_attr($review->version()); if ($review->version_matches($this->latest_version)) { echo " (Latest)"; }?></h2>
    9393          <?php print_r($review->render()) ?>
    9494        </div>
Note: See TracChangeset for help on using the changeset viewer.