| @@ -7268,21 +7268,17 @@ | ||
| 7268 | 7268 | } |
| 7269 | 7269 | |
| 7270 | 7270 | public function get_image_effect_class($s) |
| 7271 | 7271 | { |
| 7272 | + $effect = Grid_Ajax_Security::sanitize_image_effect($s['image_effects'] ?? 'none'); | |
| 7272 | 7273 | $class = ''; |
| 7273 | - if (!king_addons_freemius()->can_use_premium_code__premium_only()) { | |
| 7274 | - if (in_array($s['image_effects'], ['pro-zi', 'pro-zo', 'pro-go', 'pro-bo'])) { | |
| 7275 | - $s['image_effects'] = 'none'; | |
| 7276 | - } | |
| 7274 | + if ('none' !== $effect) { | |
| 7275 | + $class .= ' king-addons-' . $effect; | |
| 7277 | 7276 | } |
| 7278 | - if ('none' !== $s['image_effects']) { | |
| 7279 | - $class .= ' king-addons-' . $s['image_effects']; | |
| 7280 | - } | |
| 7281 | - if ('slide' !== $s['image_effects']) { | |
| 7282 | - $class .= ' king-addons-effect-size-' . $s['image_effects_size']; | |
| 7277 | + if ('slide' !== $effect) { | |
| 7278 | + $class .= ' king-addons-effect-size-' . Grid_Ajax_Security::sanitize_image_effect_size($s['image_effects_size'] ?? 'medium'); | |
| 7283 | 7279 | } else { |
| 7284 | - $class .= ' king-addons-effect-dir-' . $s['image_effects_direction']; | |
| 7280 | + $class .= ' king-addons-effect-dir-' . Grid_Ajax_Security::sanitize_image_effect_direction($s['image_effects_direction'] ?? 'bottom'); | |
| 7285 | 7281 | } |
| 7286 | 7282 | return $class; |
| 7287 | 7283 | } |
| 7288 | 7284 | |
| @@ -8029,9 +8025,9 @@ | ||
| 8029 | 8025 | |
| 8030 | 8026 | echo '<article class="' . esc_attr($post_class) . '">'; |
| 8031 | 8027 | echo '<div class="king-addons-grid-item-inner">'; |
| 8032 | 8028 | $this->get_elements_by_location('above', $s, get_the_ID()); |
| 8033 | - echo '<div class="king-addons-grid-media-wrap' . $this->get_image_effect_class($s) . ' ">'; | |
| 8029 | + echo '<div class="king-addons-grid-media-wrap' . esc_attr($this->get_image_effect_class($s)) . ' ">'; | |
| 8034 | 8030 | $this->render_post_thumbnail($s); |
| 8035 | 8031 | echo '<div class="king-addons-grid-media-hover king-addons-animation-wrap">'; |
| 8036 | 8032 | $this->render_media_overlay($s); |
| 8037 | 8033 | $this->get_elements_by_location('over', $s, get_the_ID()); |
