| @@ -30,9 +30,9 @@ | ||
| 30 | 30 | fs_enqueue_local_style( 'fs_dialog_boxes', '/admin/dialog-boxes.css' ); |
| 31 | 31 | fs_enqueue_local_style( 'fs_optout', '/admin/optout.css' ); |
| 32 | 32 | fs_enqueue_local_style( 'fs_common', '/admin/common.css' ); |
| 33 | 33 | |
| 34 | - if ( ! $fs->is_premium() ) { | |
| 34 | + if ( ! $permission_manager->is_premium_context() ) { | |
| 35 | 35 | $optional_permissions = array( $permission_manager->get_extensions_permission( false, |
| 36 | 36 | false, |
| 37 | 37 | true |
| 38 | 38 | ) ); |
| @@ -117,13 +117,13 @@ | ||
| 117 | 117 | $ajax_action = 'toggle_permission_tracking'; |
| 118 | 118 | |
| 119 | 119 | $form_id = "fs_opt_out_{$fs->get_id()}"; |
| 120 | 120 | ?> |
| 121 | -<div id="<?php echo $form_id ?>" | |
| 121 | +<div id="<?php echo esc_attr( $form_id ) ?>" | |
| 122 | 122 | class="fs-modal fs-modal-opt-out" |
| 123 | - data-plugin-id="<?php echo $fs->get_id() ?>" | |
| 124 | - data-action="<?php echo $fs->get_ajax_action( $ajax_action ) ?>" | |
| 125 | - data-security="<?php echo $fs->get_ajax_security( $ajax_action ) ?>" | |
| 123 | + data-plugin-id="<?php echo esc_attr( $fs->get_id() ) ?>" | |
| 124 | + data-action="<?php echo esc_attr( $fs->get_ajax_action( $ajax_action ) ) ?>" | |
| 125 | + data-security="<?php echo esc_attr( $fs->get_ajax_security( $ajax_action ) ) ?>" | |
| 126 | 126 | style="display: none"> |
| 127 | 127 | <div class="fs-modal-dialog"> |
| 128 | 128 | <div class="fs-modal-header"> |
| 129 | 129 | <h4><?php echo esc_html( $opt_out_text ) ?></h4> |
| @@ -144,13 +144,14 @@ | ||
| 144 | 144 | </div> |
| 145 | 145 | </div> |
| 146 | 146 | <?php foreach ( $permission_groups as $i => $permission_group ) : ?> |
| 147 | 147 | <?php if ( ! empty( $permission_group[ 'prompt' ] ) ) : ?> |
| 148 | - <div class="fs-<?php echo $permission_group[ 'id' ] ?>-opt-out fs-opt-out-disclaimer" data-group-id="<?php echo $permission_group[ 'id' ] ?>" style="display: none"> | |
| 148 | + <div class="fs-<?php echo esc_attr( $permission_group[ 'id' ] ) ?>-opt-out fs-opt-out-disclaimer" data-group-id="<?php echo esc_attr( $permission_group[ 'id' ] ) ?>" style="display: none"> | |
| 149 | 149 | <div class="fs-modal-body"> |
| 150 | 150 | <div class="fs-modal-panel active"> |
| 151 | 151 | <div class="notice notice-error inline opt-out-error-message"><p></p></div> |
| 152 | 152 | <?php foreach ( $permission_group[ 'prompt' ] as $p ) : ?> |
| 153 | + <?php // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> | |
| 153 | 154 | <p><?php echo $p ?></p> |
| 154 | 155 | <?php endforeach ?> |
| 155 | 156 | </div> |
| 156 | 157 | </div> |
| @@ -169,14 +170,14 @@ | ||
| 169 | 170 | <script type="text/javascript"> |
| 170 | 171 | (function( $ ) { |
| 171 | 172 | $( document ).ready(function() { |
| 172 | 173 | FS.OptOut( |
| 173 | - '<?php echo $fs->get_id() ?>', | |
| 174 | - '<?php echo $slug ?>', | |
| 175 | - '<?php echo $fs->get_module_type() ?>', | |
| 174 | + <?php echo wp_json_encode( $fs->get_id() ) ?>, | |
| 175 | + <?php echo wp_json_encode( $slug ) ?>, | |
| 176 | + <?php echo wp_json_encode( $fs->get_module_type() ) ?>, | |
| 176 | 177 | <?php echo $fs->is_registered( true ) ? 'true' : 'false' ?>, |
| 177 | 178 | <?php echo $fs->is_tracking_allowed() ? 'true' : 'false' ?>, |
| 178 | - '<?php echo esc_js( $reconnect_url ) ?>' | |
| 179 | + <?php echo wp_json_encode( $reconnect_url ) ?> | |
| 179 | 180 | ); |
| 180 | 181 | }); |
| 181 | 182 | })( jQuery ); |
| 182 | 183 | </script> |