← All changes | views/admin/customizer/controls/select.php +16 -15 3.5.0 → 4.9.2 View file →

		@@ -1,23 +1,24 @@
1	1	<?php
2		- // If this file is called directly, abort.
3		- if ( ! defined( 'WPINC' ) ) {
4		- die;
5		- }
	2	+// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- view template receives variables via extract(); prefixing is impractical.
	3	+ // If this file is called directly, abort.
	4	+if ( ! defined( 'WPINC' ) ) {
	5	+ die;
	6	+}
6	7	?>
7	8
8	9	<select
9		- <?php $control->link();?>
10		- data-default-val="<?php echo $control->settings['default']->value(); ?>"
11		- <?php echo $control->input_attrs(); ?>>
	10	+ <?php $control->link(); ?>
	11	+ data-default-val="<?php echo esc_attr( $control->settings['default']->value() ); ?>"
	12	+ <?php echo $control->input_attrs(); //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>>
12	13	<?php
13		- foreach ( $control->choices as $key => $label ) {
14		- echo '<option value="' . esc_attr( $key ) . '">' . $label . '</option>';
15		- }
16		- ?>
	14	+ foreach ( $control->choices as $key => $label ) {
	15	+ echo '<option value="' . esc_attr( $key ) . '">' . esc_html( $label ) . '</option>';
	16	+ }
	17	+ ?>
17	18	</select>
18	19
19		-<?php if ( ! empty( $control->label ) ): ?>
	20	+<?php if ( ! empty( $control->label ) ) : ?>
20	21	<span class="customize-control-title betterdocs-customize-control-title">
21		- <?php echo esc_html( $control->label ); ?>
22		- </span>
23		-<?php endif;?>
	22	+ <?php echo esc_html( $control->label ); ?>
	23	+ </span>
	24	+<?php endif; ?>