| @@ -21,14 +21,14 @@ | ||
| 21 | 21 | * You should have received a copy of the GNU General Public License |
| 22 | 22 | * along with Logtivity. If not, see <https://www.gnu.org/licenses/>. |
| 23 | 23 | */ |
| 24 | 24 | ?> |
| 25 | -<div style="<?php echo ($display ?? false) ? 'display:block;' : '' ?>" | |
| 25 | +<div style="<?php echo esc_attr(($display ?? false) ? 'display:block;' : '') ?>" | |
| 26 | 26 | class="updated notice logtivity-notice is-dismissible"> |
| 27 | 27 | <div> |
| 28 | - <div style="<?php echo ($logo ?? false) ? '' : 'display:none;'; ?>"> | |
| 28 | + <div style="<?php echo esc_attr(($logo ?? false) ? '' : 'display:none;'); ?>"> | |
| 29 | 29 | <img style="margin: 0 0 20px; display: block; width: 200px; height: auto;" |
| 30 | - src="<?php echo sprintf('%s/logtivity/assets/logtivity-logo.svg', plugin_dir_url('logtivity.php')) ?>" | |
| 30 | + src="<?php echo esc_url(plugin_dir_url('logtivity.php') . 'logtivity/assets/logtivity-logo.svg') ?>" | |
| 31 | 31 | alt="Logtivity"> |
| 32 | 32 | </div> |
| 33 | 33 | <div> |
| 34 | 34 | <h3> |
| @@ -39,13 +39,22 @@ | ||
| 39 | 39 | </p> |
| 40 | 40 | <ol> |
| 41 | 41 | <li> |
| 42 | 42 | <?php |
| 43 | - echo sprintf( | |
| 44 | - esc_html__('%1$sCreate a Logtivity account%2$s or %3$slog in to your Logtivity account%4$s.', 'logtivity'), | |
| 45 | - '<a target="_blank" href="' . logtivity_get_app_url() . '/register">', | |
| 43 | + printf( | |
| 44 | + wp_kses( | |
| 45 | + __('%1$sCreate a Logtivity account%2$s or %3$slog in to your Logtivity account%4$s.', 'logtivity'), | |
| 46 | + [ | |
| 47 | + 'a' => [ | |
| 48 | + 'href' => true, | |
| 49 | + 'rel' => true, | |
| 50 | + 'target' => true, | |
| 51 | + ], | |
| 52 | + ] | |
| 53 | + ), | |
| 54 | + '<a target="_blank" rel="noopener noreferrer" href="' . esc_url(logtivity_get_app_url() . '/register') . '">', | |
| 46 | 55 | '</a>', |
| 47 | - '<a target="_blank" href="' . logtivity_get_app_url() . '/login">', | |
| 56 | + '<a target="_blank" rel="noopener noreferrer" href="' . esc_url(logtivity_get_app_url() . '/login') . '">', | |
| 48 | 57 | '</a>' |
| 49 | 58 | ); |
| 50 | 59 | ?> |
| 51 | 60 | </li> |
| @@ -50,11 +59,20 @@ | ||
| 50 | 59 | ?> |
| 51 | 60 | </li> |
| 52 | 61 | <li> |
| 53 | 62 | <?php |
| 54 | - echo sprintf( | |
| 55 | - esc_html__('%sRead the "Add Site" instructions%s and get your API Key.', 'logtivity'), | |
| 56 | - '<a target="_blank" href="https://logtivity.io/docs/connect-your-site-to-logtivity/">', | |
| 63 | + printf( | |
| 64 | + wp_kses( | |
| 65 | + __('%sRead the "Add Site" instructions%s and get your API Key.', 'logtivity'), | |
| 66 | + [ | |
| 67 | + 'a' => [ | |
| 68 | + 'href' => true, | |
| 69 | + 'rel' => true, | |
| 70 | + 'target' => true, | |
| 71 | + ], | |
| 72 | + ] | |
| 73 | + ), | |
| 74 | + '<a target="_blank" rel="noopener noreferrer" href="' . esc_url('https://logtivity.io/docs/connect-your-site-to-logtivity/') . '">', | |
| 57 | 75 | '</a>' |
| 58 | 76 | ); |
| 59 | 77 | ?> |
| 60 | 78 | </li> |
| @@ -59,11 +77,20 @@ | ||
| 59 | 77 | ?> |
| 60 | 78 | </li> |
| 61 | 79 | <li> |
| 62 | 80 | <?php |
| 63 | - echo sprintf( | |
| 64 | - esc_html__('Add your API Key into %sthe Logtivity Settings area%s on this site.', 'logtivity'), | |
| 65 | - '<a target="_blank" href="' . admin_url('admin.php?page=logtivity-settings') . '">', | |
| 81 | + printf( | |
| 82 | + wp_kses( | |
| 83 | + __('Add your API Key into %sthe Logtivity Settings area%s on this site.', 'logtivity'), | |
| 84 | + [ | |
| 85 | + 'a' => [ | |
| 86 | + 'href' => true, | |
| 87 | + 'rel' => true, | |
| 88 | + 'target' => true, | |
| 89 | + ], | |
| 90 | + ] | |
| 91 | + ), | |
| 92 | + '<a target="_blank" rel="noopener noreferrer" href="' . esc_url(admin_url('admin.php?page=logtivity-settings')) . '">', | |
| 66 | 93 | '</a>' |
| 67 | 94 | ); |
| 68 | 95 | ?> |
| 69 | 96 | </li> |
| @@ -70,13 +97,15 @@ | ||
| 70 | 97 | </ol> |
| 71 | 98 | <p> |
| 72 | 99 | <a class="button-primary logtivity-button logtivity-button-secondary" |
| 73 | 100 | target="_blank" |
| 74 | - href="<?php echo logtivity_get_app_url() . '/login'; ?>"> | |
| 101 | + rel="noopener noreferrer" | |
| 102 | + href="<?php echo esc_url(logtivity_get_app_url() . '/login'); ?>"> | |
| 75 | 103 | <?php esc_html_e('Login to Logtivity', 'logtivity'); ?> |
| 76 | 104 | </a> <a class="button-primary logtivity-button logtivity-button-primary" |
| 77 | 105 | target="_blank" |
| 78 | - href="<?php echo logtivity_get_app_url() . '/register'; ?>"> | |
| 106 | + rel="noopener noreferrer" | |
| 107 | + href="<?php echo esc_url(logtivity_get_app_url() . '/register'); ?>"> | |
| 79 | 108 | <?php esc_html_e('Start your free 10 day trial', 'logtivity'); ?> |
| 80 | 109 | </a> |
| 81 | 110 | </p> |
| 82 | 111 | </div> |