field_before() ); echo $this->shortcoder(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- returns markup escaped within the method. echo ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- field_attributes() escapes each attribute via esc_attr() echo wp_kses_post( $this->field_after() ); } public function shortcoder() { if ( ! empty( $this->field['shortcoder'] ) ) { $shortcodes = ( is_array( $this->field['shortcoder'] ) ) ? $this->field['shortcoder'] : array_filter( (array) $this->field['shortcoder'] ); $instances = ( ! empty( ADMINIFY::$shortcode_instances ) ) ? ADMINIFY::$shortcode_instances : array(); if ( ! empty( $shortcodes ) && ! empty( $instances ) ) { foreach ( $shortcodes as $shortcode ) { foreach ( $instances as $instance ) { if ( $instance['modal_id'] === $shortcode ) { $id = $instance['modal_id']; $title = $instance['button_title']; echo ''. esc_html( $title ) .''; } } } } } } } }