| @@ -1,9 +1,13 @@ | ||
| 1 | +<?php | |
| 2 | +// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals. | |
| 3 | +defined('ABSPATH') || die('Restricted Access'); | |
| 4 | +?> | |
| 1 | 5 | <div class="acym__popup__listing text-center grid-x"> |
| 2 | - <h1 class="acym__title acym__title__secondary text-center cell"><?= acym_translation('ACYM_LINKS') ?></h1> | |
| 6 | + <h1 class="acym__title acym__title__secondary text-center cell"><?php echo esc_html(acym_translation('ACYM_LINKS')); ?></h1> | |
| 3 | 7 | <div class="grid-x medium-12 cell acym__row__no-listing text-left acym_vcenter"> |
| 4 | 8 | <div class="grid-x cell medium-5 small-12 acym__listing__title acym__listing__title__dynamics acym__online__link acym_vcenter"> |
| 5 | - <label class="small-3 margin-bottom-0" for="acym__popup__online__tagtext"><?= acym_translation('ACYM_TEXT') ?>: </label> | |
| 9 | + <label class="small-3 margin-bottom-0" for="acym__popup__online__tagtext"><?php echo esc_html(acym_translation('ACYM_TEXT')); ?>: </label> | |
| 6 | 10 | <input class="small-9" type="text" name="tagtext" id="acym__popup__online__tagtext" readonly onchange="setOnlineTag();"> |
| 7 | 11 | </div> |
| 8 | 12 | </div> |
| 9 | 13 | <div class="cell grid-x"> |
| @@ -9,14 +13,24 @@ | ||
| 9 | 13 | <div class="cell grid-x"> |
| 10 | 14 | <?php foreach ($links as $tagname => $tag) { |
| 11 | 15 | $disabledClass = !empty($tag['disabled']) ? ' acym__listing__row__popup--disabled' : ''; |
| 12 | 16 | $onclick = empty($tag['disabled']) ? "changeOnlineTag('".$tagname."');" : ''; ?> |
| 13 | - <div class="grid-x small-12 cell acym__row__no-listing acym__listing__row__popup text-left<?= $disabledClass ?>" <?= empty($onclick) ? '' : 'onclick="'.$onclick.'"' ?> | |
| 14 | - id="tr_<?= $tagname ?>"> | |
| 17 | + <div class="grid-x small-12 cell acym__row__no-listing acym__listing__row__popup text-left<?php echo esc_attr($disabledClass); ?>" <?php echo empty($onclick) ? '' | |
| 18 | + : 'onclick="'.esc_attr($onclick).'"'; ?> | |
| 19 | + id="tr_<?php echo esc_attr($tagname); ?>"> | |
| 15 | 20 | <?php if (!empty($tag['disabled'])) { |
| 16 | - echo acym_tooltip(['hoveredText' => $tag['desc'], 'textShownInTooltip' => $tag['tooltip'], 'classContainer' => 'cell']); | |
| 21 | + acym_tooltip(['hoveredText' => $tag['desc'], 'textShownInTooltip' => $tag['tooltip'], 'classContainer' => 'cell']); | |
| 17 | 22 | } else { ?> |
| 18 | - <div class="cell small-12 acym__listing__title acym__listing__title__dynamics"><?= $tag['desc'] ?></div> | |
| 23 | + <div class="cell small-12 acym__listing__title acym__listing__title__dynamics"> | |
| 24 | + <?php | |
| 25 | + echo wp_kses( | |
| 26 | + $tag['desc'], | |
| 27 | + [ | |
| 28 | + 'b' => [], | |
| 29 | + ] | |
| 30 | + ); | |
| 31 | + ?> | |
| 32 | + </div> | |
| 19 | 33 | <?php } ?> |
| 20 | 34 | </div> |
| 21 | 35 | <?php } ?> |
| 22 | 36 | </div> |
| @@ -22,23 +36,25 @@ | ||
| 22 | 36 | </div> |
| 23 | 37 | </div> |
| 24 | 38 | |
| 25 | 39 | <div class="acym__popup__listing text-center grid-x"> |
| 26 | - <h1 class="acym__title acym__title__secondary text-center cell"><?= acym_translation('ACYM_INFORMATION') ?></h1> | |
| 40 | + <h1 class="acym__title acym__title__secondary text-center cell"><?php echo esc_html(acym_translation('ACYM_INFORMATION')); ?></h1> | |
| 27 | 41 | <div class="cell grid-x"> |
| 28 | 42 | <?php foreach ($information as $infoKey => $info) { |
| 29 | 43 | $disabledClass = empty($info['value']) ? ' acym__listing__row__popup--disabled' : ''; |
| 30 | 44 | $onclick = empty($info['value']) ? '' : "changeOnlineTag('info', '".$infoKey."', true); setTag('{info:".$infoKey."}', jQuery(this));"; |
| 31 | 45 | ?> |
| 32 | - <div class="grid-x medium-12 cell acym__row__no-listing acym__listing__row__popup text-left<?= $disabledClass ?>" | |
| 33 | - <?= empty($onclick) ? '' : 'onclick="'.$onclick.'"' ?> | |
| 34 | - id="tr_<?= $infoKey ?>"> | |
| 46 | + <div class="grid-x medium-12 cell acym__row__no-listing acym__listing__row__popup text-left<?php echo esc_attr($disabledClass); ?>" | |
| 47 | + <?php echo empty($onclick) ? '' : 'onclick="'.esc_attr($onclick).'"'; ?> | |
| 48 | + id="tr_<?php echo esc_attr($infoKey); ?>"> | |
| 35 | 49 | <div class="cell medium-12 small-12 acym__listing__title acym__listing__title__dynamics"> |
| 36 | - <?= $info['label'] ?> : | |
| 50 | + <?php echo esc_html($info['label']); ?> : | |
| 37 | 51 | <?php if (acym_isImageUrl($info['value'])) { ?> |
| 38 | - <img src="<?= $info['value'] ?>" alt="Image" style="display: inline-block; max-width: 25px; max-height: 25px; vertical-align: middle;" /> | |
| 52 | + <img src="<?php echo esc_url($info['value']); ?>" | |
| 53 | + alt="Image" | |
| 54 | + style="display: inline-block; max-width: 25px; max-height: 25px; vertical-align: middle;" /> | |
| 39 | 55 | <?php } else { ?> |
| 40 | - <?= $info['value'] ?> | |
| 56 | + <?php echo esc_html($info['value']); ?> | |
| 41 | 57 | <?php } ?> |
| 42 | 58 | </div> |
| 43 | 59 | </div> |
| 44 | 60 | <?php } ?> |