| @@ -118,9 +118,9 @@ | ||
| 118 | 118 | 'learn-press/layout/list-courses/section/courses', |
| 119 | 119 | [ |
| 120 | 120 | 'wrap' => sprintf( |
| 121 | 121 | '<ul class="learn-press-courses lp-list-courses-no-css %1$s" data-layout="%1$s">', |
| 122 | - $skin | |
| 122 | + esc_attr( $skin ) | |
| 123 | 123 | ), |
| 124 | 124 | 'courses' => $html_courses, |
| 125 | 125 | 'wrap_end' => '</ul>', |
| 126 | 126 | ], |
| @@ -205,9 +205,9 @@ | ||
| 205 | 205 | [ |
| 206 | 206 | 'wrapper' => '<div class="course-thumbnail">', |
| 207 | 207 | 'img' => sprintf( |
| 208 | 208 | '<a href="%s">%s</a>', |
| 209 | - $course->get_permalink(), | |
| 209 | + esc_url( $course->get_permalink() ), | |
| 210 | 210 | $singleCourseTemplate->html_image( $course ) |
| 211 | 211 | ), |
| 212 | 212 | 'wrapper_end' => '</div>', |
| 213 | 213 | ], |
| @@ -265,16 +265,16 @@ | ||
| 265 | 265 | //'course_footer' => '<div class="course-footer">', |
| 266 | 266 | 'price' => $singleCourseTemplate->html_price( $course ), |
| 267 | 267 | 'btn_read_more' => sprintf( |
| 268 | 268 | '<div class="course-readmore"><a href="%s">%s</a></div>', |
| 269 | - $course->get_permalink(), | |
| 269 | + esc_url( $course->get_permalink() ), | |
| 270 | 270 | $btn_read_more_text |
| 271 | 271 | ), |
| 272 | 272 | 'btn_view_list' => $show_view_students ? sprintf( |
| 273 | 273 | '<div class="lp-wrap-btn-view-course-students"> |
| 274 | - <button type="button" class="lp-button lp-btn-view-students" data-course-id="%d" data-course-title="%s">%s</button> | |
| 274 | + <button type="button" class="lp-button lp-btn-view-students" data-course-id="%s" data-course-title="%s">%s</button> | |
| 275 | 275 | </div>', |
| 276 | - $course->get_id(), | |
| 276 | + esc_attr( $course->get_id() ), | |
| 277 | 277 | esc_attr( $course->get_title() ), |
| 278 | 278 | esc_html__( 'View List Students', 'learnpress' ) |
| 279 | 279 | ) : '', |
| 280 | 280 | //'course_footer_end' => '</div>', |
| @@ -298,9 +298,9 @@ | ||
| 298 | 298 | [ |
| 299 | 299 | 'wrapper' => '<div class="course-content">', |
| 300 | 300 | 'title' => sprintf( |
| 301 | 301 | '<h3 class="wap-course-title"><a class="course-permalink" href="%s">%s</a></h3>', |
| 302 | - $course->get_permalink(), | |
| 302 | + esc_url( $course->get_permalink() ), | |
| 303 | 303 | $singleCourseTemplate->html_title( $course ) |
| 304 | 304 | ), |
| 305 | 305 | 'featured' => $singleCourseTemplate->html_featured( $course ), |
| 306 | 306 | 'wrapper_instructor_cate' => '<div class="course-instructor-category">', |
| @@ -522,9 +522,14 @@ | ||
| 522 | 522 | |
| 523 | 523 | $content = '<ul class="courses-layouts-display-list">'; |
| 524 | 524 | foreach ( $layouts as $k => $v ) { |
| 525 | 525 | $active = ( $data['courses_layout_default'] ?? '' ) === $k ? 'active' : ''; |
| 526 | - $content .= '<li class="courses-layout ' . $active . '" data-layout="' . $k . '">' . $v . '</li>'; | |
| 526 | + $content .= sprintf( | |
| 527 | + '<li class="courses-layout %s" data-layout="%s">%s</li>', | |
| 528 | + esc_attr( $active ), | |
| 529 | + esc_attr( $k ), | |
| 530 | + $v | |
| 531 | + ); | |
| 527 | 532 | } |
| 528 | 533 | $content .= '</ul>'; |
| 529 | 534 | |
| 530 | 535 | return Template::instance()->nest_elements( $html_wrapper, $content ); |
| @@ -557,9 +562,14 @@ | ||
| 557 | 562 | ); |
| 558 | 563 | |
| 559 | 564 | $content = '<select name="order_by" class="courses-order-by">'; |
| 560 | 565 | foreach ( $values as $k => $v ) { |
| 561 | - $content .= '<option value="' . $k . '" ' . selected( $default_value, $k, false ) . '>' . $v . '</option>'; | |
| 566 | + $content .= sprintf( | |
| 567 | + '<option value="%s" %s>%s</option>', | |
| 568 | + esc_attr( $k ), | |
| 569 | + selected( $default_value, $k, false ), | |
| 570 | + $v | |
| 571 | + ); | |
| 562 | 572 | } |
| 563 | 573 | $content .= '</select>'; |
| 564 | 574 | |
| 565 | 575 | return Template::instance()->nest_elements( $html_wrapper, $content ); |
| @@ -672,9 +682,12 @@ | ||
| 672 | 682 | _n( 'Course Found', 'Courses Found', $total_courses, 'learnpress' ) |
| 673 | 683 | ); |
| 674 | 684 | $view_all = sprintf( |
| 675 | 685 | '<a href="%s">%s</a>', |
| 676 | - add_query_arg( 'c_search', $key_search, learn_press_get_page_link( 'courses' ) ), | |
| 686 | + esc_url( add_query_arg( | |
| 687 | + 'c_search', | |
| 688 | + $key_search, | |
| 689 | + learn_press_get_page_link( 'courses' ) ) ), | |
| 677 | 690 | __( 'View All', 'learnpress' ) |
| 678 | 691 | ); |
| 679 | 692 | |
| 680 | 693 | // Section. |
