| @@ -1,11 +1,17 @@ | ||
| 1 | +<?php | |
| 2 | +defined('ABSPATH') || die('Restricted Access'); | |
| 3 | + | |
| 4 | +use AcyMailing\Helpers\SecurityHelper; | |
| 5 | + | |
| 6 | +?> | |
| 1 | 7 | <button class="shrink grid-x cell acy_button_submit button" type="button" data-task="createMail" data-and="__and__"> |
| 2 | - <?php echo acym_translation('ACYM_CREATE_MAIL'); ?> | |
| 8 | + <?php echo esc_html(acym_translation('ACYM_CREATE_MAIL')); ?> | |
| 3 | 9 | </button> |
| 4 | 10 | <input type="hidden" name="acym_action[actions][__and__][acy_add_queue][mail_id]"> |
| 5 | 11 | <div class="shrink acym__automation__action__mail__name"></div> |
| 6 | 12 | <div class="shrink margin-left-1 margin-right-1"> |
| 7 | - <?php echo acym_strtolower(acym_translation('ACYM_OR')); ?> | |
| 13 | + <?php echo esc_html(acym_strtolower(acym_translation('ACYM_OR'))); ?> | |
| 8 | 14 | </div> |
| 9 | 15 | <button |
| 10 | 16 | type="button" |
| 11 | 17 | data-modal-name="acym__template__choose__modal__and__" |
| @@ -13,11 +19,16 @@ | ||
| 13 | 19 | aria-controls="acym__template__choose__modal" |
| 14 | 20 | tabindex="0" |
| 15 | 21 | aria-haspopup="true" |
| 16 | 22 | class="cell medium-shrink button-secondary auto button "> |
| 17 | - <?php echo acym_translation('ACYM_CHOOSE_EXISTING'); ?> | |
| 23 | + <?php echo esc_html(acym_translation('ACYM_CHOOSE_EXISTING')); ?> | |
| 18 | 24 | </button> |
| 19 | -<?php echo acym_info('ACYM_CHOOSE_EXISTING_DESC', '', 'margin-left-0'); ?> | |
| 25 | +<?php acym_info(['textShownInTooltip' => 'ACYM_CHOOSE_EXISTING_DESC', 'classContainer' => 'margin-left-0']); ?> | |
| 20 | 26 | <div class="medium-4 grid-x cell"> |
| 21 | - <?php echo acym_dateField('acym_action[actions][__and__][acy_add_queue][time]', '[time]', '', '', '+'); ?> | |
| 27 | + <?php | |
| 28 | + echo wp_kses( | |
| 29 | + acym_dateField('acym_action[actions][__and__][acy_add_queue][time]', '[time]', '', '', '+'), | |
| 30 | + SecurityHelper::ALLOWED_HTML_DATE | |
| 31 | + ); | |
| 32 | + ?> | |
| 22 | 33 | </div> |
| 23 | 34 | |
