← All changes
|
extensions/blocks/premium-content/_inc/legacy-buttons.php
+2
-2
13.3.3
→
16.3-beta
View file →
| @@ -39,12 +39,12 @@ | ||
| 39 | 39 | $button_styles = implode( ';', $button_styles ); |
| 40 | 40 | |
| 41 | 41 | $login_button = sprintf( |
| 42 | 42 | '<div class="wp-block-button"><a role="button" href="%1$s" class="%2$s" style="%3$s">%4$s</a></div>', |
| 43 | - subscription_service()->access_url(), | |
| 43 | + esc_url( subscription_service()->access_url() ), | |
| 44 | 44 | empty( $attributes['buttonClasses'] ) ? 'wp-block-button__link' : esc_attr( $attributes['buttonClasses'] ), |
| 45 | 45 | esc_attr( $button_styles ), |
| 46 | - empty( $attributes['loginButtonText'] ) ? __( 'Log In', 'jetpack' ) : $attributes['loginButtonText'] | |
| 46 | + empty( $attributes['loginButtonText'] ) ? __( 'Log In', 'jetpack' ) : wp_kses_post( $attributes['loginButtonText'] ) | |
| 47 | 47 | ); |
| 48 | 48 | |
| 49 | 49 | $subscribe_button = \Jetpack_Memberships::get_instance()->render_button( |
| 50 | 50 | array( |