| @@ -57,9 +57,9 @@ | ||
| 57 | 57 | $hidden_url = ( empty( $args['url'] ) ) ? ' hidden' : ''; |
| 58 | 58 | $hidden_auto = ( empty( $this->value['url'] ) ) ? ' hidden' : ''; |
| 59 | 59 | $placeholder = ( empty( $this->field['placeholder'] ) ) ? ' placeholder="'. esc_html__( 'Not selected', 'adminify' ) .'"' : ''; |
| 60 | 60 | |
| 61 | - echo wp_kses_post( $this->field_before() ); | |
| 61 | + echo $this->field_before(); | |
| 62 | 62 | |
| 63 | 63 | if ( ! empty( $args['preview'] ) ) { |
| 64 | 64 | |
| 65 | 65 | $preview_width = ( ! empty( $args['preview_width'] ) ) ? 'max-width:'. esc_attr( $args['preview_width'] ) .'px;' : ''; |
| @@ -66,9 +66,9 @@ | ||
| 66 | 66 | $preview_height = ( ! empty( $args['preview_height'] ) ) ? 'max-height:'. esc_attr( $args['preview_height'] ) .'px;' : ''; |
| 67 | 67 | $preview_style = ( ! empty( $preview_width ) || ! empty( $preview_height ) ) ? ' style="'. esc_attr( $preview_width . $preview_height ) .'"': ''; |
| 68 | 68 | |
| 69 | 69 | echo '<div class="adminify--preview'. esc_attr( $hidden_auto ) .'">'; |
| 70 | - echo '<div class="adminify-image-preview"'. $preview_style .'>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- attribute value pre-escaped with esc_attr() where built. | |
| 70 | + echo '<div class="adminify-image-preview"'. $preview_style .'>'; | |
| 71 | 71 | echo '<i class="adminify--remove fas fa-times"></i><span><img src="'. esc_url( $preview_src ) .'" class="adminify--src" /></span>'; |
| 72 | 72 | echo '</div>'; |
| 73 | 73 | echo '</div>'; |
| 74 | 74 | |
| @@ -74,11 +74,11 @@ | ||
| 74 | 74 | |
| 75 | 75 | } |
| 76 | 76 | |
| 77 | 77 | echo '<div class="adminify--placeholder">'; |
| 78 | - echo '<input type="text" name="'. esc_attr( $this->field_name( '[url]' ) ) .'" value="'. esc_attr( $this->value['url'] ) .'" class="adminify--url'. esc_attr( $hidden_url ) .'" readonly="readonly"'. $this->field_attributes() . $placeholder .' />'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 79 | - echo '<a href="#" class="button button-primary adminify--button" data-library="'. esc_attr( $library ) .'" data-preview-size="'. esc_attr( $args['preview_size'] ) .'">'. esc_html( $args['button_title'] ) .'</a>'; | |
| 80 | - echo ( empty( $args['preview'] ) ) ? '<a href="#" class="button button-secondary adminify-warning-primary adminify--remove'. esc_attr( $hidden_auto ) .'">'. esc_html( $args['remove_title'] ) .'</a>' : ''; | |
| 78 | + echo '<input type="text" name="'. esc_attr( $this->field_name( '[url]' ) ) .'" value="'. esc_attr( $this->value['url'] ) .'" class="adminify--url'. esc_attr( $hidden_url ) .'" readonly="readonly"'. $this->field_attributes() . $placeholder .' />'; | |
| 79 | + echo '<a href="#" class="button button-primary adminify--button" data-library="'. esc_attr( $library ) .'" data-preview-size="'. esc_attr( $args['preview_size'] ) .'">'. $args['button_title'] .'</a>'; | |
| 80 | + echo ( empty( $args['preview'] ) ) ? '<a href="#" class="button button-secondary adminify-warning-primary adminify--remove'. esc_attr( $hidden_auto ) .'">'. $args['remove_title'] .'</a>' : ''; | |
| 81 | 81 | echo '</div>'; |
| 82 | 82 | |
| 83 | 83 | echo '<input type="hidden" name="'. esc_attr( $this->field_name( '[id]' ) ) .'" value="'. esc_attr( $this->value['id'] ) .'" class="adminify--id"/>'; |
| 84 | 84 | echo '<input type="hidden" name="'. esc_attr( $this->field_name( '[width]' ) ) .'" value="'. esc_attr( $this->value['width'] ) .'" class="adminify--width"/>'; |
| @@ -87,9 +87,9 @@ | ||
| 87 | 87 | echo '<input type="hidden" name="'. esc_attr( $this->field_name( '[alt]' ) ) .'" value="'. esc_attr( $this->value['alt'] ) .'" class="adminify--alt"/>'; |
| 88 | 88 | echo '<input type="hidden" name="'. esc_attr( $this->field_name( '[title]' ) ) .'" value="'. esc_attr( $this->value['title'] ) .'" class="adminify--title"/>'; |
| 89 | 89 | echo '<input type="hidden" name="'. esc_attr( $this->field_name( '[description]' ) ) .'" value="'. esc_attr( $this->value['description'] ) .'" class="adminify--description"/>'; |
| 90 | 90 | |
| 91 | - echo wp_kses_post( $this->field_after() ); | |
| 91 | + echo $this->field_after(); | |
| 92 | 92 | |
| 93 | 93 | } |
| 94 | 94 | |
| 95 | 95 | } |