# fluentform/trunk/app/Views/public/conversational-form-inline.php

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder, version trunk. 23 lines.

- Page: https://pluginprobe.com/plugins/fluentform/trunk/code/app/Views/public/conversational-form-inline.php
- Raw: https://pluginprobe.com/plugins/fluentform/trunk/raw/app/Views/public/conversational-form-inline.php
- Modified: 2026-08-10T13:59:14+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/fluentform/trunk/code/app/Views/public/conversational-form-inline.php#L10-L20`.

```php
<?php

defined('ABSPATH') or die;

?>
<style>
    <?php
    // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- CSS is sanitized via fluentformSanitizeCSS()
    echo fluentformSanitizeCSS($generated_css);
    // SECURITY (FINDING-13): $submit_css interpolates the top-level submitButton colours raw
    // (never covered by Updater::sanitizeCustomSubmit), so a background_color of
    // "red}</style><script>..." would break out here. The standalone view already sanitizes;
    // this inline view did not. fluentformSanitizeCSS() blanks any CSS containing a tag pattern.
    // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- CSS is sanitized via fluentformSanitizeCSS()
    echo fluentformSanitizeCSS($submit_css);
    ?>
</style>
<div class="ffc_conv_wrapper ffc_inline_form">
    <div class="frm-fluent-form ff_conv_app fluent_form_<?php echo esc_attr($form_id); ?> ff_conv_app_frame ff_conv_app_<?php echo esc_attr($form_id); ?> ffc_media_hide_mob_<?php echo esc_attr($design['hide_media_on_mobile']); ?>" data-form_id="<?php echo esc_attr($form_id) ?>">
        <div data-var_name="<?php echo esc_attr($global_var_name); ?>" class="ffc_conv_form" style="width: 100%" id="ffc_app_instance_<?php echo esc_attr($instance_id); ?>"></div>
    </div>
</div>

```