field, array( 'inline' => false, 'query_args' => array(), 'check_all' => false, 'check_all_text' => esc_html__( 'Check/Uncheck All', 'adminify' ), ) ); $inline_class = ( $args['inline'] ) ? ' class="adminify--inline-list"' : ''; echo wp_kses_post( $this->field_before() ); if ( isset( $this->field['options'] ) ) { $value = ( is_array( $this->value ) ) ? $this->value : array_filter( (array) $this->value ); $options = $this->field['options']; $options = ( is_array( $options ) ) ? $options : array_filter( $this->field_data( $options, false, $args['query_args'] ) ); if ( is_array( $options ) && ! empty( $options ) ) { echo ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- attribute value pre-escaped with esc_attr() where built. foreach ( $options as $option_key => $option_value ) { if ( is_array( $option_value ) && ! empty( $option_value ) ) { echo '

'; echo '

'. esc_attr( $option_key ) .'
'; echo ''; echo 'field_attributes() . esc_attr( $checked ) .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() echo ''. Utils::kses_custom( $sub_value ) .''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- kses_custom() is a wp_kses() wrapper; output already escaped. echo ''; echo '

'; echo '

'; } else { $checked = ( in_array( $option_key, $value ) ) ? ' checked' : ''; echo '

'; echo ''; echo 'field_attributes() . esc_attr( $checked ) .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() echo ''. Utils::kses_custom( $option_value ) .''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- kses_custom() is a wp_kses() wrapper; output already escaped. echo ''; echo '

'; } } echo ''; if ( $args['check_all'] ) { echo '

'. esc_html( $args['check_all_text'] ) .'

'; } } else { echo ( ! empty( $this->field['empty_message'] ) ) ? esc_attr( $this->field['empty_message'] ) : esc_html__( 'No data available.', 'adminify' ); } } else { echo ''; echo 'field_attributes() .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() echo 'value, 1, false ) ) . $this->field_attributes() .'/>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() echo ( ! empty( $this->field['label'] ) ) ? ''. Utils::kses_custom( $this->field['label'] ) .'' : ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- kses_custom() is a wp_kses() wrapper; output already escaped. echo ''; } echo wp_kses_post( $this->field_after() ); } } }