| @@ -27,12 +27,12 @@ | ||
| 27 | 27 | ?> |
| 28 | 28 | <view> |
| 29 | 29 | <title><?php echo esc_html( apply_filters( 'the_title_rss', $post->post_title ) ); ?></title> |
| 30 | 30 | <link><?php the_permalink_rss(); ?></link> |
| 31 | - <post_author><?php echo FrmXMLHelper::cdata( get_the_author_meta( 'login' ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></post_author> | |
| 31 | + <post_author><?php echo FrmXMLHelper::cdata( get_the_author_meta( 'login' ) ); // WPCS: XSS ok. ?></post_author> | |
| 32 | 32 | <description></description> |
| 33 | - <content><?php echo FrmXMLHelper::cdata( apply_filters( 'the_content_export', $post->post_content ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></content> | |
| 34 | - <excerpt><?php echo FrmXMLHelper::cdata( apply_filters( 'the_excerpt_export', $post->post_excerpt ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></excerpt> | |
| 33 | + <content><?php echo FrmXMLHelper::cdata( apply_filters( 'the_content_export', $post->post_content ) ); // WPCS: XSS ok. ?></content> | |
| 34 | + <excerpt><?php echo FrmXMLHelper::cdata( apply_filters( 'the_excerpt_export', $post->post_excerpt ) ); // WPCS: XSS ok. ?></excerpt> | |
| 35 | 35 | <post_id><?php echo esc_html( $post->ID ); ?></post_id> |
| 36 | 36 | <post_date><?php echo esc_html( $post->post_date ); ?></post_date> |
| 37 | 37 | <post_date_gmt><?php echo esc_html( $post->post_date_gmt ); ?></post_date_gmt> |
| 38 | 38 | <comment_status><?php echo esc_html( $post->comment_status ); ?></comment_status> |
| @@ -41,9 +41,9 @@ | ||
| 41 | 41 | <status><?php echo esc_html( $post->post_status ); ?></status> |
| 42 | 42 | <post_parent><?php echo esc_html( $post->post_parent ); ?></post_parent> |
| 43 | 43 | <menu_order><?php echo esc_html( $post->menu_order ); ?></menu_order> |
| 44 | 44 | <post_type><?php echo esc_html( $post->post_type ); ?></post_type> |
| 45 | - <post_password><?php echo FrmXMLHelper::cdata( $post->post_password ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></post_password> | |
| 45 | + <post_password><?php echo FrmXMLHelper::cdata( $post->post_password ); // WPCS: XSS ok. ?></post_password> | |
| 46 | 46 | <is_sticky><?php echo esc_html( $is_sticky ); ?></is_sticky> |
| 47 | 47 | <?php if ( 'attachment' === $post->post_type ) : ?> |
| 48 | 48 | <attachment_url><?php echo esc_url( wp_get_attachment_url( $post->ID ) ); ?></attachment_url> |
| 49 | 49 | <?php |
| @@ -56,9 +56,9 @@ | ||
| 56 | 56 | } |
| 57 | 57 | ?> |
| 58 | 58 | <postmeta> |
| 59 | 59 | <meta_key><?php echo esc_html( $meta->meta_key ); ?></meta_key> |
| 60 | - <meta_value><?php echo FrmXMLHelper::cdata( $meta->meta_value ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></meta_value> | |
| 60 | + <meta_value><?php echo FrmXMLHelper::cdata( $meta->meta_value ); // WPCS: XSS ok. ?></meta_value> | |
| 61 | 61 | </postmeta> |
| 62 | 62 | <?php |
| 63 | 63 | endforeach; |
| 64 | 64 | |
| @@ -67,20 +67,20 @@ | ||
| 67 | 67 | $terms = wp_get_object_terms( $post->ID, $taxonomies ); |
| 68 | 68 | |
| 69 | 69 | foreach ( (array) $terms as $term ) { |
| 70 | 70 | ?> |
| 71 | - <category domain="<?php echo esc_attr( $term->taxonomy ); ?>" nicename="<?php echo esc_attr( $term->slug ); ?>"><?php echo FrmXMLHelper::cdata( $term->name ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></category> | |
| 71 | + <category domain="<?php echo esc_attr( $term->taxonomy ); ?>" nicename="<?php echo esc_attr( $term->slug ); ?>"><?php echo FrmXMLHelper::cdata( $term->name ); // WPCS: XSS ok. ?></category> | |
| 72 | 72 | <?php |
| 73 | 73 | } |
| 74 | 74 | } |
| 75 | 75 | |
| 76 | - if ( 'frm_display' === $post->post_type && is_callable( 'FrmViewsLayout::get_layouts_for_view' ) ) { | |
| 76 | + if ( is_callable( 'FrmViewsLayout::get_layouts_for_view' ) ) { | |
| 77 | 77 | $layouts = FrmViewsLayout::get_layouts_for_view( $post->ID ); |
| 78 | 78 | foreach ( $layouts as $layout ) { |
| 79 | 79 | ?> |
| 80 | 80 | <layout> |
| 81 | 81 | <type><?php echo esc_html( $layout->type ); ?></type> |
| 82 | - <data><?php echo FrmXMLHelper::cdata( $layout->data ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></data> | |
| 82 | + <data><?php echo FrmXMLHelper::cdata( $layout->data ); // WPCS: XSS ok. ?></data> | |
| 83 | 83 | </layout> |
| 84 | 84 | <?php |
| 85 | 85 | } |
| 86 | 86 | } |
| @@ -108,12 +108,12 @@ | ||
| 108 | 108 | $label = ( 'category' === $term->taxonomy || 'tag' === $term->taxonomy ) ? $term->taxonomy : 'term'; |
| 109 | 109 | ?> |
| 110 | 110 | <term><term_id><?php echo esc_html( $term->term_id ); ?></term_id><term_taxonomy><?php echo esc_html( $term->taxonomy ); ?></term_taxonomy><?php |
| 111 | 111 | if ( ! empty( $term->name ) ) { |
| 112 | - echo '<term_name>' . FrmXMLHelper::cdata( $term->name ) . '</term_name>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 112 | + echo '<term_name>' . FrmXMLHelper::cdata( $term->name ) . '</term_name>'; // WPCS: XSS ok. | |
| 113 | 113 | } |
| 114 | 114 | if ( ! empty( $term->description ) ) { |
| 115 | - echo '<term_description>' . FrmXMLHelper::cdata( $term->description ) . '</term_description>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 115 | + echo '<term_description>' . FrmXMLHelper::cdata( $term->description ) . '</term_description>'; // WPCS: XSS ok. | |
| 116 | 116 | } |
| 117 | 117 | echo '<term_slug>' . esc_html( $term->slug ) . '</term_slug>'; |
| 118 | 118 | echo '</term>'; |
| 119 | 119 | } |