| @@ -244,8 +244,9 @@ | ||
| 244 | 244 | |
| 245 | 245 | /** |
| 246 | 246 | * Add wrapper and introduction text to payment information section |
| 247 | 247 | * |
| 248 | + * @since 4.16.4 Escaped the headline output. | |
| 248 | 249 | * @since 2.7.0 |
| 249 | 250 | * |
| 250 | 251 | * @param int $formId |
| 251 | 252 | */ |
| @@ -261,9 +262,9 @@ | ||
| 261 | 262 | ); |
| 262 | 263 | |
| 263 | 264 | printf( |
| 264 | 265 | '<div class="give-section payment"><div class="heading">%1$s</div><div class="subheading">%2$s</div>', |
| 265 | - $headline, | |
| 266 | + esc_html($headline), | |
| 266 | 267 | $description |
| 267 | 268 | ); |
| 268 | 269 | } |
| 269 | 270 | |
| @@ -279,8 +280,9 @@ | ||
| 279 | 280 | |
| 280 | 281 | /** |
| 281 | 282 | * Start choose amount section |
| 282 | 283 | * |
| 284 | + * @since 4.16.4 Escaped the donate button label output. | |
| 283 | 285 | * @since 2.7.0 |
| 284 | 286 | */ |
| 285 | 287 | public function getStartWrapperHTMLForAmountSection() |
| 286 | 288 | { |
| @@ -297,9 +299,9 @@ | ||
| 297 | 299 | ); |
| 298 | 300 | $arrow = is_rtl() ? 'left' : 'right'; |
| 299 | 301 | printf( |
| 300 | 302 | '<button class="give-btn advance-btn">%1$s<i class="fas fa-chevron-%2$s"></i></button></div>', |
| 301 | - $label, | |
| 303 | + esc_html($label), | |
| 302 | 304 | $arrow |
| 303 | 305 | ); |
| 304 | 306 | |
| 305 | 307 | if ( ! empty($content)) { |
| @@ -314,8 +316,9 @@ | ||
| 314 | 316 | |
| 315 | 317 | /** |
| 316 | 318 | * Close choose amount section |
| 317 | 319 | * |
| 320 | + * @since 4.16.4 Escaped the continue button label output. | |
| 318 | 321 | * @since 2.7.0 |
| 319 | 322 | */ |
| 320 | 323 | public function getCloseWrapperHTMLForAmountSection() |
| 321 | 324 | { |
| @@ -326,9 +329,9 @@ | ||
| 326 | 329 | $arrow = is_rtl() ? 'left' : 'right'; |
| 327 | 330 | |
| 328 | 331 | printf( |
| 329 | 332 | '<button class="give-btn advance-btn">%1$s<i class="fas fa-chevron-%2$s"></i></button></div>', |
| 330 | - $label, | |
| 333 | + esc_html($label), | |
| 331 | 334 | $arrow |
| 332 | 335 | ); |
| 333 | 336 | } |
| 334 | 337 | |