| @@ -40,9 +40,9 @@ | ||
| 40 | 40 | <?php |
| 41 | 41 | }//end if |
| 42 | 42 | |
| 43 | 43 | if ( isset( $atts['nav'] ) ) { |
| 44 | - FrmAppHelper::kses_echo( $atts['nav'], 'all' ); | |
| 44 | + echo FrmAppHelper::kses( $atts['nav'], 'all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 45 | 45 | } |
| 46 | 46 | |
| 47 | 47 | echo '<div id="frm-publishing">'; |
| 48 | 48 | if ( ! empty( $atts['publish'] ) || ! empty( $atts['import_link'] ) ) { |
| @@ -67,9 +67,9 @@ | ||
| 67 | 67 | |
| 68 | 68 | if ( FrmAppHelper::is_full_screen() ) { |
| 69 | 69 | ?> |
| 70 | 70 | <div class="frm-full-close"> |
| 71 | - <a href="<?php echo esc_url( $atts['close'] ); ?>" aria-label="<?php esc_attr_e( 'Close', 'formidable' ); ?>"> | |
| 71 | + <a href="<?php echo esc_attr( $atts['close'] ); ?>" aria-label="<?php esc_attr_e( 'Close', 'formidable' ); ?>"> | |
| 72 | 72 | <?php FrmAppHelper::icon_by_class( 'frmfont frm_close_icon', array( 'aria-label' => 'Dismiss' ) ); ?> |
| 73 | 73 | </a> |
| 74 | 74 | </div> |
| 75 | 75 | <?php } ?> |