← All changes | Inc/Classes/OutputCSS.php +2 -2 4.1.17 → 4.0 View file →

		@@ -97,9 +97,9 @@
97	97	// Custom CSS
98	98	if (!empty($this->options['devtools_tabs']['custom_css'])) {
99	99	echo "\n<!-- Start of WP Adminify - Admin Area Custom CSS -->\n";
100	100	echo "<style>\n";
101		- echo esc_html( wp_strip_all_tags($this->options['devtools_tabs']['custom_css']) );
	101	+ echo wp_strip_all_tags($this->options['devtools_tabs']['custom_css']);
102	102	echo "\n</style>";
103	103	echo "\n<!-- /End of WP Adminify - Admin Area Custom CSS -->\n";
104	104	}
105	105	}
		@@ -109,9 +109,9 @@
109	109	// Custom JS
110	110	if (!empty($this->options['devtools_tabs']['custom_js'])) {
111	111	echo "\n<!-- Start of WP Adminify - Admin Area Custom JS -->\n";
112	112	echo "<script>\n";
113		- echo html_entity_decode($this->options['devtools_tabs']['custom_js']); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- user-supplied custom JS for inline <script> block, escaping would break output
	113	+ echo wp_strip_all_tags($this->options['devtools_tabs']['custom_js']);
114	114	echo "\n</script>";
115	115	echo "\n<!-- /End of WP Adminify - Admin Area Custom JS -->\n";
116	116	}
117	117	}