| @@ -40,16 +40,14 @@ | ||
| 40 | 40 | <?php |
| 41 | 41 | }//end if |
| 42 | 42 | |
| 43 | 43 | if ( isset( $atts['nav'] ) ) { |
| 44 | - FrmAppHelper::kses_echo( $atts['nav'], 'all' ); | |
| 44 | + echo FrmAppHelper::kses( $atts['nav'], 'all' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 45 | 45 | } |
| 46 | 46 | |
| 47 | 47 | echo '<div id="frm-publishing">'; |
| 48 | - | |
| 49 | 48 | if ( ! empty( $atts['publish'] ) || ! empty( $atts['import_link'] ) ) { |
| 50 | 49 | $btn_type = 'primary'; |
| 51 | - | |
| 52 | 50 | if ( isset( $atts['publish'] ) && is_array( $atts['publish'] ) ) { |
| 53 | 51 | call_user_func( $atts['publish'][0], $atts['publish'][1] ); |
| 54 | 52 | $btn_type = 'secondary'; |
| 55 | 53 | } |
| @@ -69,9 +67,9 @@ | ||
| 69 | 67 | |
| 70 | 68 | if ( FrmAppHelper::is_full_screen() ) { |
| 71 | 69 | ?> |
| 72 | 70 | <div class="frm-full-close"> |
| 73 | - <a href="<?php echo esc_url( $atts['close'] ); ?>" aria-label="<?php esc_attr_e( 'Close', 'formidable' ); ?>"> | |
| 71 | + <a href="<?php echo esc_attr( $atts['close'] ); ?>" aria-label="<?php esc_attr_e( 'Close', 'formidable' ); ?>"> | |
| 74 | 72 | <?php FrmAppHelper::icon_by_class( 'frmfont frm_close_icon', array( 'aria-label' => 'Dismiss' ) ); ?> |
| 75 | 73 | </a> |
| 76 | 74 | </div> |
| 77 | 75 | <?php } ?> |
