| @@ -75,20 +75,20 @@ | ||
| 75 | 75 | extract( $feature ); ?> |
| 76 | 76 | |
| 77 | 77 | <div class='feature' id='feature-<?php echo esc_attr( $index ); ?>'> |
| 78 | 78 | <div class='featureIcon'> |
| 79 | - <?php echo $isUpIcon ? | |
| 79 | + <?php echo $isUpIcon ? // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- inline constructed with esc_url/esc_attr below. | |
| 80 | 80 | ( $upIcon['url'] ? "<img src='". esc_url( $upIcon['url'] ) ."' alt='". esc_attr( $upIcon['alt'] ) ."' />" : '' ) : |
| 81 | 81 | ( $icon['class'] ? "<i class='". esc_attr( $icon['class'] ) ."'></i>" : '' ); ?> |
| 82 | 82 | </div> |
| 83 | 83 | |
| 84 | 84 | <div class='featureDetails'> |
| 85 | - <?php echo $isTitle && $title ? "<h4 class='featureTitle'>". wp_kses_post( $title ) ."</h4>" : ''; ?> | |
| 85 | + <?php echo $isTitle && $title ? "<h4 class='featureTitle'>". wp_kses_post( $title ) ."</h4>" : ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static wrapper tags with wp_kses_post-escaped content. ?> | |
| 86 | 86 | |
| 87 | - <?php echo $isSep ? "<span class='featureSeparator'></span>" : ''; ?> | |
| 87 | + <?php echo $isSep ? "<span class='featureSeparator'></span>" : ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static markup, no user input. ?> | |
| 88 | 88 | |
| 89 | - <?php echo $isDesc && $desc ? "<p class='featureDescription'>". wp_kses_post( $desc ) ."</p>" : ''; ?> | |
| 89 | + <?php echo $isDesc && $desc ? "<p class='featureDescription'>". wp_kses_post( $desc ) ."</p>" : ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static wrapper tags with wp_kses_post-escaped content. ?> | |
| 90 | 90 | </div> |
| 91 | 91 | </div> |
| 92 | 92 | <?php } ?> |
| 93 | 93 | </div> |
| 94 | 94 | </div> |
