| @@ -27,9 +27,9 @@ | ||
| 27 | 27 | ) ); |
| 28 | 28 | |
| 29 | 29 | $this->value = ( is_array( $this->value ) ) ? $this->value : array_filter( (array) $this->value ); |
| 30 | 30 | |
| 31 | - echo wp_kses_post( $this->field_before() ); | |
| 31 | + echo $this->field_before(); | |
| 32 | 32 | |
| 33 | 33 | if ( isset( $this->field['options'] ) ) { |
| 34 | 34 | |
| 35 | 35 | if ( ! empty( $args['ajax'] ) ) { |
| @@ -49,9 +49,9 @@ | ||
| 49 | 49 | $field_class = ( $args['chosen'] ) ? ' class="adminify-chosen'. esc_attr( $chosen_rtl . $chosen_sortable . $chosen_ajax ) .'"' : ''; |
| 50 | 50 | $field_name = $this->field_name( $multiple_name ); |
| 51 | 51 | $field_attr = $this->field_attributes(); |
| 52 | 52 | $maybe_options = $this->field['options']; |
| 53 | - $chosen_data_attr = ( $args['chosen'] && ! empty( $args['settings'] ) ) ? ' data-chosen-settings="'. esc_attr( wp_json_encode( $args['settings'] ) ) .'"' : ''; | |
| 53 | + $chosen_data_attr = ( $args['chosen'] && ! empty( $args['settings'] ) ) ? ' data-chosen-settings="'. esc_attr( json_encode( $args['settings'] ) ) .'"' : ''; | |
| 54 | 54 | |
| 55 | 55 | if ( is_string( $maybe_options ) && ! empty( $args['chosen'] ) && ! empty( $args['ajax'] ) ) { |
| 56 | 56 | $options = $this->field_wp_query_data_title( $maybe_options, $this->value ); |
| 57 | 57 | } else if ( is_string( $maybe_options ) ) { |
| @@ -63,9 +63,9 @@ | ||
| 63 | 63 | if ( ( is_array( $options ) && ! empty( $options ) ) || ( ! empty( $args['chosen'] ) && ! empty( $args['ajax'] ) ) ) { |
| 64 | 64 | |
| 65 | 65 | if ( ! empty( $args['chosen'] ) && ! empty( $args['multiple'] ) ) { |
| 66 | 66 | |
| 67 | - echo '<select name="'. esc_attr( $field_name ) .'" class="adminify-hide-select hidden"'. $multiple_attr . $field_attr .'>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- value pre-escaped where built. | |
| 67 | + echo '<select name="'. $field_name .'" class="adminify-hide-select hidden"'. $multiple_attr . $field_attr .'>'; | |
| 68 | 68 | foreach ( $this->value as $option_key ) { |
| 69 | 69 | echo '<option value="'. esc_attr( $option_key ) .'" selected>'. esc_attr( $option_key ) .'</option>'; |
| 70 | 70 | } |
| 71 | 71 | echo '</select>'; |
| @@ -75,9 +75,9 @@ | ||
| 75 | 75 | |
| 76 | 76 | } |
| 77 | 77 | |
| 78 | 78 | // These attributes has been serialized above. |
| 79 | - echo '<select name="'. esc_attr( $field_name ) .'"'. $field_class . $multiple_attr . $placeholder_attr . $field_attr . $chosen_data_attr .'>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- value pre-escaped where built. | |
| 79 | + echo '<select name="'. esc_attr( $field_name ) .'"'. $field_class . $multiple_attr . $placeholder_attr . $field_attr . $chosen_data_attr .'>'; | |
| 80 | 80 | |
| 81 | 81 | if ( $args['placeholder'] && empty( $args['multiple'] ) ) { |
| 82 | 82 | if ( ! empty( $args['chosen'] ) ) { |
| 83 | 83 | echo '<option value=""></option>'; |
| @@ -115,9 +115,9 @@ | ||
| 115 | 115 | } |
| 116 | 116 | |
| 117 | 117 | } |
| 118 | 118 | |
| 119 | - echo wp_kses_post( $this->field_after() ); | |
| 119 | + echo $this->field_after(); | |
| 120 | 120 | |
| 121 | 121 | } |
| 122 | 122 | |
| 123 | 123 | public function enqueue() { |