← All changes | includes/settings/controls.php +17 -17 4.2.2 → 3.2.3 View file →

		@@ -65,17 +65,18 @@
65	65	if ( empty( $field['attributes']['class'] ) ) {
66	66	$field['attributes']['class'] = 'regular-text';
67	67	}
68	68
	69	+ $attributes = Utils::render_html_attributes( $field['attributes'] );
69	70	?>
70		- <input type="<?php echo esc_attr( $field['type'] ); ?>" id="<?php echo esc_attr( $field['id'] ); ?>" name="<?php echo esc_attr( $field['id'] ); ?>" value="<?php echo esc_attr( get_option( $field['id'], $field['std'] ) ); ?>" <?php Utils::print_html_attributes( $field['attributes'] ); ?>/>
	71	+ <input type="<?php echo esc_attr( $field['type'] ); ?>" id="<?php echo esc_attr( $field['id'] ); ?>" name="<?php echo esc_attr( $field['id'] ); ?>" value="<?php echo esc_attr( get_option( $field['id'], $field['std'] ) ); ?>" <?php echo $attributes; ?>/>
71	72	<?php
72	73	if ( ! empty( $field['sub_desc'] ) ) :
73		- echo wp_kses_post( $field['sub_desc'] );
	74	+ echo $field['sub_desc'];
74	75	endif;
75	76	?>
76	77	<?php if ( ! empty( $field['desc'] ) ) : ?>
77		- <p class="description"><?php echo wp_kses_post( $field['desc'] ); ?></p>
	78	+ <p class="description"><?php echo $field['desc']; ?></p>
78	79	<?php
79	80	endif;
80	81	}
81	82
		@@ -92,17 +93,17 @@
92	93	*/
93	94	private static function checkbox( array $field ) {
94	95	?>
95	96	<label>
96		- <input type="<?php echo esc_attr( $field['type'] ); ?>" id="<?php echo esc_attr( $field['id'] ); ?>" name="<?php echo esc_attr( $field['id'] ); ?>" value="<?php echo esc_attr( $field['value'] ); ?>"<?php checked( $field['value'], get_option( $field['id'], $field['std'] ) ); ?> />
	97	+ <input type="<?php echo esc_attr( $field['type'] ); ?>" id="<?php echo esc_attr( $field['id'] ); ?>" name="<?php echo esc_attr( $field['id'] ); ?>" value="<?php echo $field['value']; ?>"<?php checked( $field['value'], get_option( $field['id'], $field['std'] ) ); ?> />
97	98	<?php
98	99	if ( ! empty( $field['sub_desc'] ) ) :
99		- echo wp_kses_post( $field['sub_desc'] );
	100	+ echo $field['sub_desc'];
100	101	endif;
101	102	?>
102	103	</label>
103	104	<?php if ( ! empty( $field['desc'] ) ) : ?>
104		- <p class="description"><?php echo wp_kses_post( $field['desc'] ); ?></p>
	105	+ <p class="description"><?php echo $field['desc']; ?></p>
105	106	<?php
106	107	endif;
107	108	}
108	109
		@@ -126,13 +127,13 @@
126	127	foreach ( $field['options'] as $option_key => $option_value ) :
127	128	?>
128	129	<label>
129	130	<input type="checkbox" name="<?php echo esc_attr( $field['id'] ); ?>[]" value="<?php echo esc_attr( $option_key ); ?>"<?php checked( in_array( $option_key, $old_value ), true ); ?> />
130		- <?php echo wp_kses_post( $option_value ); ?>
	131	+ <?php echo $option_value; ?>
131	132	</label><br />
132	133	<?php endforeach; ?>
133	134	<?php if ( ! empty( $field['desc'] ) ) : ?>
134		- <p class="description"><?php echo wp_kses_post( $field['desc'] ); ?></p>
	135	+ <p class="description"><?php echo $field['desc']; ?></p>
135	136	<?php
136	137	endif;
137	138	}
138	139
		@@ -151,18 +152,18 @@
151	152	$old_value = get_option( $field['id'], $field['std'] );
152	153	?>
153	154	<select name="<?php echo esc_attr( $field['id'] ); ?>">
154	155	<?php if ( ! empty( $field['show_select'] ) ) : ?>
155		- <option value="">— <?php echo esc_html__( 'Select', 'elementor' ); ?> —</option>
	156	+ <option value="">— <?php echo __( 'Select', 'elementor' ); ?> —</option>
156	157	<?php endif; ?>
157	158
158	159	<?php foreach ( $field['options'] as $value => $label ) : ?>
159		- <option value="<?php echo esc_attr( $value ); ?>"<?php esc_attr( selected( $value, $old_value ) ); ?>><?php echo esc_html( $label ); ?></option>
	160	+ <option value="<?php echo esc_attr( $value ); ?>"<?php selected( $value, $old_value ); ?>><?php echo $label; ?></option>
160	161	<?php endforeach; ?>
161	162	</select>
162	163
163	164	<?php if ( ! empty( $field['desc'] ) ) : ?>
164		- <p class="description"><?php echo wp_kses_post( $field['desc'] ); ?></p>
	165	+ <p class="description"><?php echo $field['desc']; ?></p>
165	166	<?php
166	167	endif;
167	168	}
168	169
		@@ -232,9 +233,9 @@
232	233
233	234	if ( is_multisite() ) {
234	235	$roles = [
235	236	'super_admin' => [
236		- 'name' => esc_html__( 'Super Admin', 'elementor' ),
	237	+ 'name' => __( 'Super Admin', 'elementor' ),
237	238	],
238	239	] + $roles;
239	240	}
240	241
		@@ -264,19 +265,18 @@
264	265	if ( empty( $field['html'] ) ) {
265	266	return;
266	267	}
267	268	?>
268		- <div id="<?php echo esc_attr( $field['id'] ); ?>">
	269	+ <div id="<?php echo $field['id']; ?>">
269	270
270		- <?php // PHPCS - This is a Raw HTML control, it is not escaped on purpose. ?>
271		- <div><?php echo $field['html']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></div>
	271	+ <div><?php echo $field['html']; ?></div>
272	272	<?php
273	273	if ( ! empty( $field['sub_desc'] ) ) :
274		- echo wp_kses_post( $field['sub_desc'] );
	274	+ echo $field['sub_desc'];
275	275	endif;
276	276	?>
277	277	<?php if ( ! empty( $field['desc'] ) ) : ?>
278		- <p class="description"><?php echo wp_kses_post( $field['desc'] ); ?></p>
	278	+ <p class="description"><?php echo $field['desc']; ?></p>
279	279	<?php endif; ?>
280	280	</div>
281	281	<?php
282	282	}