← All changes | core/any/emails_tpl/standard-html-tpl.php +13 -4 10.10 → 11.9 View file →

		@@ -17,14 +17,23 @@
17	17	*
18	18	* @param array $fields_values
19	19	*/
20	20	function wpbc_email_template_standard_html( $fields_values ) {
21		- ob_start();
22	21
23		- $base_color = 'background-color:' . ( empty( $fields_values['base_color'] ) ? '#557da1' : $fields_values['base_color'] ) . ';';
	22	+ ob_start();
	23	+
	24	+ // FixIn: 10.14.2.2.
	25	+ $base_color = sanitize_hex_color( $fields_values['base_color'] );
	26	+ $base_color = 'background-color:' . ( empty( $fields_values['base_color'] ) ? '#557da1' : $fields_values['base_color'] ) . ';';
	27	+
	28	+ $background_color = sanitize_hex_color( $fields_values['background_color'] );
24	29	$background_color = 'background-color:' . ( empty( $fields_values['background_color'] ) ? '#FDFDFD' : $fields_values['background_color'] ) . ';';
25		- $body_color = 'background-color:' . ( empty( $fields_values['body_color'] ) ? '#F5F5F5' : $fields_values['body_color'] ) . ';';
26		- $text_color = 'color:' . ( empty( $fields_values['text_color'] ) ? '#333333' : $fields_values['text_color'] ) . ';';
	30	+
	31	+ $body_color = sanitize_hex_color( $fields_values['body_color'] );
	32	+ $body_color = 'background-color:' . ( empty( $fields_values['body_color'] ) ? '#F5F5F5' : $fields_values['body_color'] ) . ';';
	33	+
	34	+ $text_color = sanitize_hex_color( $fields_values['text_color'] );
	35	+ $text_color = 'color:' . ( empty( $fields_values['text_color'] ) ? '#333333' : $fields_values['text_color'] ) . ';';
27	36
28	37	////////////////////////////////////////////////////////////////////////////////
29	38	// HTML Email Template
30	39	////////////////////////////////////////////////////////////////////////////////