| @@ -6,10 +6,8 @@ | ||
| 6 | 6 | if ( isset( $include_extra_container ) ) { ?> |
| 7 | 7 | <div class="<?php echo esc_attr( $include_extra_container ); ?>" id="frm_form_<?php echo esc_attr( $form->id ); ?>_container"> |
| 8 | 8 | <?php |
| 9 | 9 | } |
| 10 | - | |
| 11 | -// phpcs:ignore Universal.Operators.StrictComparisons | |
| 12 | 10 | if ( isset( $message ) && $message != '' ) { |
| 13 | 11 | if ( FrmAppHelper::is_admin() ) { |
| 14 | 12 | ?> |
| 15 | 13 | <div id="message" class="frm_updated_message" role="status"><?php echo wp_kses_post( $message ); ?></div> |
| @@ -17,13 +15,14 @@ | ||
| 17 | 15 | } else { |
| 18 | 16 | FrmFormsHelper::maybe_get_scroll_js( $form->id ); |
| 19 | 17 | |
| 20 | 18 | // we need to allow scripts here for javascript in the success message |
| 21 | - echo FrmAppHelper::maybe_kses( $message ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 19 | + echo $message; // WPCS: XSS ok. | |
| 22 | 20 | } |
| 23 | 21 | } |
| 24 | 22 | |
| 25 | -if ( ! empty( $errors ) && is_array( $errors ) ) { | |
| 23 | +if ( isset( $errors ) && is_array( $errors ) && ! empty( $errors ) ) { | |
| 24 | + | |
| 26 | 25 | if ( isset( $form ) && is_object( $form ) ) { |
| 27 | 26 | FrmFormsHelper::get_scroll_js( $form->id ); |
| 28 | 27 | } |
| 29 | 28 | ?> |
| @@ -29,12 +28,10 @@ | ||
| 29 | 28 | ?> |
| 30 | 29 | <div class="<?php echo esc_attr( FrmFormsHelper::form_error_class() ); ?>" role="alert"> |
| 31 | 30 | <?php |
| 32 | 31 | $img = ''; |
| 33 | - | |
| 34 | 32 | if ( ! FrmAppHelper::is_admin() ) { |
| 35 | 33 | $img = apply_filters( 'frm_error_icon', $img ); |
| 36 | - | |
| 37 | 34 | if ( $img && ! empty( $img ) ) { |
| 38 | 35 | echo '<img src="' . esc_url( $img ) . '" alt="" />'; |
| 39 | 36 | } |
| 40 | 37 | } |
| @@ -43,9 +40,9 @@ | ||
| 43 | 40 | |
| 44 | 41 | ?> |
| 45 | 42 | </div> |
| 46 | 43 | <?php |
| 47 | -}//end if | |
| 44 | +} | |
| 48 | 45 | |
| 49 | 46 | if ( isset( $include_extra_container ) ) { |
| 50 | 47 | ?> |
| 51 | 48 | </div> |
