| @@ -7250,15 +7250,21 @@ | ||
| 7250 | 7250 | } |
| 7251 | 7251 | |
| 7252 | 7252 | public function get_animation_class($data, $object) |
| 7253 | 7253 | { |
| 7254 | - $class = ''; | |
| 7255 | - if ('none' !== $data[$object . '_animation']) { | |
| 7256 | - $class .= ' king-addons-' . $object . '-' . $data[$object . '_animation']; | |
| 7257 | - $class .= ' king-addons-anim-size-' . $data[$object . '_animation_size']; | |
| 7258 | - $class .= ' king-addons-animation-timing-' . $data[$object . '_animation_timing']; | |
| 7259 | - if ('yes' === $data[$object . '_animation_tr']) $class .= ' king-addons-anim-transparency'; | |
| 7254 | + $animation = Grid_Ajax_Security::sanitize_animation($data[$object . '_animation'] ?? 'none'); | |
| 7255 | + if ('none' === $animation) { | |
| 7256 | + return ''; | |
| 7260 | 7257 | } |
| 7258 | + | |
| 7259 | + $class = ' king-addons-' . sanitize_html_class((string) $object) . '-' . $animation; | |
| 7260 | + $class .= ' king-addons-anim-size-' . Grid_Ajax_Security::sanitize_animation_size($data[$object . '_animation_size'] ?? 'large'); | |
| 7261 | + $class .= ' king-addons-animation-timing-' . Grid_Ajax_Security::sanitize_animation_timing($data[$object . '_animation_timing'] ?? 'ease-default'); | |
| 7262 | + | |
| 7263 | + if ('yes' === Grid_Ajax_Security::sanitize_yes_no_switcher($data[$object . '_animation_tr'] ?? '')) { | |
| 7264 | + $class .= ' king-addons-anim-transparency'; | |
| 7265 | + } | |
| 7266 | + | |
| 7261 | 7267 | return $class; |
| 7262 | 7268 | } |
| 7263 | 7269 | |
| 7264 | 7270 | public function get_image_effect_class($s) |
| @@ -7301,9 +7307,9 @@ | ||
| 7301 | 7307 | $post_id = get_the_ID(); |
| 7302 | 7308 | } |
| 7303 | 7309 | |
| 7304 | 7310 | $overlay_url = $post_id ? get_the_permalink($post_id) : '#'; |
| 7305 | - echo '<div class="king-addons-grid-media-hover-bg ' . $this->get_animation_class($s, 'overlay') . '" data-url="' . esc_url($overlay_url) . '">'; | |
| 7311 | + echo '<div class="king-addons-grid-media-hover-bg ' . esc_attr($this->get_animation_class($s, 'overlay')) . '" data-url="' . esc_url($overlay_url) . '">'; | |
| 7306 | 7312 | if (king_addons_freemius()->can_use_premium_code__premium_only()) { |
| 7307 | 7313 | if ('' !== $s['overlay_image']['url']) { |
| 7308 | 7314 | echo '<img src="' . esc_url($s['overlay_image']['url']) . '">'; |
| 7309 | 7315 | } |
