| @@ -1,7 +1,12 @@ | ||
| 1 | +<?php | |
| 2 | +// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- View file, its variables are local to the include scope, not true globals. | |
| 3 | +defined('ABSPATH') || die('Restricted Access'); | |
| 4 | +?> | |
| 1 | 5 | <div id="acym__wysid__context__text" style="display: none" class="grid-x padding-1"> |
| 2 | 6 | <p class="cell acym__wysid__right__toolbar__p__open acym__wysid__right__toolbar__p acym__title"> |
| 3 | - <?php echo acym_translation('ACYM_DYNAMIC_TEXT_TYPE').acym_info(['textShownInTooltip' => 'ACYM_DYNAMIC_TEXT_TYPE_DESC']); ?> | |
| 7 | + <?php echo esc_html(acym_translation('ACYM_DYNAMIC_TEXT_TYPE')); | |
| 8 | + acym_info(['textShownInTooltip' => 'ACYM_DYNAMIC_TEXT_TYPE_DESC']); ?> | |
| 4 | 9 | <i class="acymicon-keyboard-arrow-up"></i> |
| 5 | 10 | </p> |
| 6 | 11 | <div class="grid-x cell acym__wysid__context__modal__container grid-margin-x margin-y"> |
| 7 | 12 | <?php |
| @@ -9,9 +14,9 @@ | ||
| 9 | 14 | if (empty($onePlugin)) continue; |
| 10 | 15 | |
| 11 | 16 | echo '<button type="button" |
| 12 | 17 | class="cell medium-6 button button-secondary" |
| 13 | - acym-button-switch-type="'.$onePlugin->plugin.'">'.$onePlugin->name.'</button>'; | |
| 18 | + acym-button-switch-type="'.esc_attr($onePlugin->plugin).'">'.esc_html($onePlugin->name).'</button>'; | |
| 14 | 19 | |
| 15 | 20 | $data['tabHelper']->startTab($onePlugin->plugin); |
| 16 | 21 | $defaultValues = new \stdClass(); |
| 17 | 22 | acym_trigger('textPopup', [$defaultValues], $onePlugin->plugin); |
| @@ -19,9 +24,10 @@ | ||
| 19 | 24 | } |
| 20 | 25 | ?> |
| 21 | 26 | </div> |
| 22 | 27 | <p class="cell acym__wysid__right__toolbar__p__open acym__wysid__right__toolbar__p acym__title"> |
| 23 | - <?php echo acym_translation('ACYM_CONTENT_TO_INSERT').acym_info(['textShownInTooltip' => 'ACYM_CONTENT_TO_INSERT_DESC']); ?> | |
| 28 | + <?php echo esc_html(acym_translation('ACYM_CONTENT_TO_INSERT')); | |
| 29 | + acym_info(['textShownInTooltip' => 'ACYM_CONTENT_TO_INSERT_DESC']); ?> | |
| 24 | 30 | <i class="acymicon-keyboard-arrow-up"></i> |
| 25 | 31 | </p> |
| 26 | 32 | <div class="grid-x cell acym__wysid__context__modal__container grid-margin-x margin-y"> |
| 27 | 33 | <?php $data['tabHelper']->display('dtext_options'); ?> |
| @@ -26,15 +32,15 @@ | ||
| 26 | 32 | <div class="grid-x cell acym__wysid__context__modal__container grid-margin-x margin-y"> |
| 27 | 33 | <?php $data['tabHelper']->display('dtext_options'); ?> |
| 28 | 34 | </div> |
| 29 | 35 | <div id="acym__dynamic__texts__insert__zone" class="cell grid-x"> |
| 30 | - <input title="<?php echo acym_translation('ACYM_DYNAMIC_TEXT'); ?>" | |
| 31 | - type="text" | |
| 32 | - class="cell large-auto margin-right-1" | |
| 33 | - id="dtextcode" | |
| 34 | - name="dtextcode" | |
| 35 | - value=""> | |
| 36 | + <input title="<?php echo esc_attr(acym_translation('ACYM_DYNAMIC_TEXT')); ?>" | |
| 37 | + type="text" | |
| 38 | + class="cell large-auto margin-right-1" | |
| 39 | + id="dtextcode" | |
| 40 | + name="dtextcode" | |
| 41 | + value=""> | |
| 36 | 42 | <div class="cell large-shrink"> |
| 37 | - <button type="button" class="button" id="insertButton"><?php echo acym_translation('ACYM_INSERT_DYNAMIC_TEXT'); ?></button> | |
| 43 | + <button type="button" class="button" id="insertButton"><?php echo esc_html(acym_translation('ACYM_INSERT_DYNAMIC_TEXT')); ?></button> | |
| 38 | 44 | </div> |
| 39 | 45 | </div> |
| 40 | 46 | </div> |
