← All changes | classes/widgets/FrmShowForm.php +4 -4 6.4.2 → 6.21 View file →

		@@ -12,13 +12,13 @@
12	12
13	13	public function widget( $args, $instance ) {
14	14	$title = apply_filters( 'widget_title', empty( $instance['title'] ) ? '' : $instance['title'], $instance, $this->id_base );
15	15
16		- echo FrmAppHelper::kses( $args['before_widget'], 'all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
	16	+ FrmAppHelper::kses_echo( $args['before_widget'], 'all' );
17	17
18	18	echo '<div class="frm_form_widget">';
19	19	if ( $title ) {
20		- echo FrmAppHelper::kses( $args['before_title'] . stripslashes( $title ) . $args['after_title'], 'all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
	20	+ FrmAppHelper::kses_echo( $args['before_title'] . stripslashes( $title ) . $args['after_title'], 'all' );
21	21	}
22	22
23	23	$form_atts = array(
24	24	'id' => isset( $instance['form'] ) ? $instance['form'] : 0,
		@@ -28,9 +28,9 @@
28	28
29	29	echo FrmFormsController::get_form_shortcode( $form_atts ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
30	30
31	31	echo '</div>';
32		- echo FrmAppHelper::kses( $args['after_widget'], 'all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
	32	+ FrmAppHelper::kses_echo( $args['after_widget'], 'all' );
33	33	}
34	34
35	35	/**
36	36	* @param array $new_instance New settings for this instance as input by the user via
		@@ -91,7 +91,7 @@
91	91	<?php esc_html_e( 'Show Description', 'formidable' ); ?>
92	92	</label>
93	93	</p>
94	94	<?php
95		- return 'noform';
	95	+ return '';
96	96	}
97	97	}