| @@ -22,9 +22,9 @@ | ||
| 22 | 22 | |
| 23 | 23 | $settings = ( ! empty( $this->field['settings'] ) ) ? $this->field['settings'] : array(); |
| 24 | 24 | $settings = wp_parse_args( $settings, $default_settings ); |
| 25 | 25 | |
| 26 | - echo wp_kses_post( $this->field_before() ); | |
| 26 | + echo $this->field_before(); | |
| 27 | 27 | |
| 28 | 28 | if ( ! empty( $this->field['from_to'] ) ) { |
| 29 | 29 | |
| 30 | 30 | $args = wp_parse_args( $this->field, array( |
| @@ -36,20 +36,20 @@ | ||
| 36 | 36 | 'from' => '', |
| 37 | 37 | 'to' => '', |
| 38 | 38 | ) ); |
| 39 | 39 | |
| 40 | - echo '<label class="adminify--from">'. esc_attr( $args['text_from'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[from]' ) ) .'" value="'. esc_attr( $value['from'] ) .'"'. $this->field_attributes() .'/></label>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 41 | - echo '<label class="adminify--to">'. esc_attr( $args['text_to'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[to]' ) ) .'" value="'. esc_attr( $value['to'] ) .'"'. $this->field_attributes() .'/></label>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 40 | + echo '<label class="adminify--from">'. esc_attr( $args['text_from'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[from]' ) ) .'" value="'. esc_attr( $value['from'] ) .'"'. $this->field_attributes() .'/></label>'; | |
| 41 | + echo '<label class="adminify--to">'. esc_attr( $args['text_to'] ) .' <input type="text" name="'. esc_attr( $this->field_name( '[to]' ) ) .'" value="'. esc_attr( $value['to'] ) .'"'. $this->field_attributes() .'/></label>'; | |
| 42 | 42 | |
| 43 | 43 | } else { |
| 44 | 44 | |
| 45 | - echo '<input type="text" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $this->value ) .'"'. $this->field_attributes() .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 45 | + echo '<input type="text" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $this->value ) .'"'. $this->field_attributes() .'/>'; | |
| 46 | 46 | |
| 47 | 47 | } |
| 48 | 48 | |
| 49 | - echo '<div class="adminify-date-settings" data-settings="'. esc_attr( wp_json_encode( $settings ) ) .'"></div>'; | |
| 49 | + echo '<div class="adminify-date-settings" data-settings="'. esc_attr( json_encode( $settings ) ) .'"></div>'; | |
| 50 | 50 | |
| 51 | - echo wp_kses_post( $this->field_after() ); | |
| 51 | + echo $this->field_after(); | |
| 52 | 52 | |
| 53 | 53 | } |
| 54 | 54 | |
| 55 | 55 | public function enqueue() { |