| @@ -22,9 +22,9 @@ | ||
| 22 | 22 | ) ); |
| 23 | 23 | |
| 24 | 24 | $inline_class = ( $args['inline'] ) ? ' class="adminify--inline-list"' : ''; |
| 25 | 25 | |
| 26 | - echo wp_kses_post( $this->field_before() ); | |
| 26 | + echo $this->field_before(); | |
| 27 | 27 | |
| 28 | 28 | if ( isset( $this->field['options'] ) ) { |
| 29 | 29 | |
| 30 | 30 | $options = $this->field['options']; |
| @@ -31,9 +31,9 @@ | ||
| 31 | 31 | $options = ( is_array( $options ) ) ? $options : array_filter( $this->field_data( $options, false, $args['query_args'] ) ); |
| 32 | 32 | |
| 33 | 33 | if ( is_array( $options ) && ! empty( $options ) ) { |
| 34 | 34 | |
| 35 | - echo '<ul'. $inline_class .'>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- attribute value pre-escaped with esc_attr() where built. | |
| 35 | + echo '<ul'. $inline_class .'>'; | |
| 36 | 36 | |
| 37 | 37 | foreach ( $options as $option_key => $option_value ) { |
| 38 | 38 | |
| 39 | 39 | if ( is_array( $option_value ) && ! empty( $option_value ) ) { |
| @@ -44,9 +44,9 @@ | ||
| 44 | 44 | foreach ( $option_value as $sub_key => $sub_value ) { |
| 45 | 45 | $checked = ( $sub_key == $this->value ) ? ' checked' : ''; |
| 46 | 46 | echo '<li>'; |
| 47 | 47 | echo '<label>'; |
| 48 | - echo '<input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $sub_key ) .'"'. $this->field_attributes() . esc_attr( $checked ) .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 48 | + echo '<input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $sub_key ) .'"'. $this->field_attributes() . esc_attr( $checked ) .'/>'; | |
| 49 | 49 | echo '<span class="adminify--text">'. esc_attr( $sub_value ) .'</span>'; |
| 50 | 50 | echo '</label>'; |
| 51 | 51 | echo '</li>'; |
| 52 | 52 | } |
| @@ -58,9 +58,9 @@ | ||
| 58 | 58 | $checked = ( $option_key == $this->value ) ? ' checked' : ''; |
| 59 | 59 | |
| 60 | 60 | echo '<li>'; |
| 61 | 61 | echo '<label>'; |
| 62 | - echo '<input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $option_key ) .'"'. $this->field_attributes() . esc_attr( $checked ) .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 62 | + echo '<input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="'. esc_attr( $option_key ) .'"'. $this->field_attributes() . esc_attr( $checked ) .'/>'; | |
| 63 | 63 | echo '<span class="adminify--text">'. esc_attr( $option_value ) .'</span>'; |
| 64 | 64 | echo '</label>'; |
| 65 | 65 | echo '</li>'; |
| 66 | 66 | |
| @@ -78,15 +78,15 @@ | ||
| 78 | 78 | |
| 79 | 79 | } else { |
| 80 | 80 | |
| 81 | 81 | $label = ( isset( $this->field['label'] ) ) ? $this->field['label'] : ''; |
| 82 | - echo '<label><input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="1"'. $this->field_attributes() . esc_attr( checked( $this->value, 1, false ) ) .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() | |
| 82 | + echo '<label><input type="radio" name="'. esc_attr( $this->field_name() ) .'" value="1"'. $this->field_attributes() . esc_attr( checked( $this->value, 1, false ) ) .'/>'; | |
| 83 | 83 | echo ( ! empty( $this->field['label'] ) ) ? '<span class="adminify--text">'. esc_attr( $this->field['label'] ) .'</span>' : ''; |
| 84 | 84 | echo '</label>'; |
| 85 | 85 | |
| 86 | 86 | } |
| 87 | 87 | |
| 88 | - echo wp_kses_post( $this->field_after() ); | |
| 88 | + echo $this->field_after(); | |
| 89 | 89 | |
| 90 | 90 | } |
| 91 | 91 | |
| 92 | 92 | } |