← All changes | app/Services/FormBuilder/Components/CustomSubmitButton.php +2 -0 6.2.11 → trunk View file →

		@@ -214,8 +214,10 @@
214	214	$buttonText = $data['settings']['btn_text'];
215	215	$html .= '<button ' . $atts . ' aria-label="' . esc_attr($this->removeShortcode($buttonText)) . '">' . fluentform_sanitize_html($buttonText) . '</button>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $atts is escaped before being passed in.
216	216	}
217	217
	218	+ // SECURITY (FINDING-12): neutralize any </style> breakout in the user-built custom-button CSS.
	219	+ $styles = fluentformSanitizeCSS($styles);
218	220	if ($styles) {
219	221	$html .= '<style>' . $styles . '</style>';
220	222	}
221	223