| @@ -4,8 +4,12 @@ | ||
| 4 | 4 | * |
| 5 | 5 | * @package CartFlows |
| 6 | 6 | */ |
| 7 | 7 | |
| 8 | +// Exit if accessed directly. | |
| 9 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 10 | + exit; | |
| 11 | +} | |
| 8 | 12 | ?> |
| 9 | 13 | |
| 10 | 14 | <!DOCTYPE html> |
| 11 | 15 | <html <?php language_attributes(); ?> class="no-js"> |
| @@ -17,16 +21,21 @@ | ||
| 17 | 21 | </head> |
| 18 | 22 | |
| 19 | 23 | <body <?php body_class(); ?>> |
| 20 | 24 | |
| 21 | - <?php do_action( 'cartflows_body_top' ); ?> | |
| 25 | + <?php | |
| 26 | + wp_body_open(); | |
| 22 | 27 | |
| 28 | + do_action( 'cartflows_body_top' ); | |
| 29 | + ?> | |
| 30 | + | |
| 23 | 31 | <?php |
| 24 | 32 | |
| 25 | 33 | $atts_string = Cartflows_Helper::get_cartflows_container_atts(); |
| 26 | 34 | |
| 27 | 35 | ?> |
| 28 | - <div class="cartflows-container" <?php echo trim( $atts_string ); ?>> | |
| 36 | + <?php // HTML attributes are already sanitized individually. ?> | |
| 37 | + <div class="cartflows-container" <?php echo trim( $atts_string ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>> | |
| 29 | 38 | <?php |
| 30 | 39 | do_action( 'cartflows_container_top' ); |
| 31 | 40 | ?> |
| 32 | 41 | <div class="cartflows-primary"> |
