| @@ -20,8 +20,9 @@ | ||
| 20 | 20 | * You should have received a copy of the GNU General Public License |
| 21 | 21 | * along with Logtivity. If not, see <https://www.gnu.org/licenses/>. |
| 22 | 22 | */ |
| 23 | 23 | |
| 24 | +// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- logtivity_view() renders trusted plugin templates. | |
| 24 | 25 | echo logtivity_view('_admin-header', compact('options')); |
| 25 | 26 | ?> |
| 26 | 27 | |
| 27 | 28 | <div class="postbox"> |
| @@ -30,10 +31,11 @@ | ||
| 30 | 31 | <div class="inside"> |
| 31 | 32 | <h1 style="padding-top: 10px;">Logs</h1> |
| 32 | 33 | </div> |
| 33 | 34 | |
| 34 | - <form id="logtivity-log-index-search-form" method="GET" action="<?php echo admin_url( 'admin-ajax.php' ) ?>"> | |
| 35 | + <form id="logtivity-log-index-search-form" method="GET" action="<?php echo esc_url(admin_url( 'admin-ajax.php' )) ?>"> | |
| 35 | 36 | <input type="hidden" name="action" value="logtivity_log_index_filter"> |
| 37 | + <?php wp_nonce_field('logtivity_log_index_filter', 'logtivity_log_index_nonce') ?> | |
| 36 | 38 | <input id="logtivity_page" type="hidden" name="page"> |
| 37 | 39 | |
| 38 | 40 | <div class="logtivity-row"> |
| 39 | 41 | <div class="logtivity-col-md-4"> |
| @@ -70,5 +72,8 @@ | ||
| 70 | 72 | |
| 71 | 73 | </div> |
| 72 | 74 | </div> |
| 73 | 75 | |
| 74 | -<?php echo logtivity_view('_admin-footer', compact('options')); ?> | |
| 76 | + <?php | |
| 77 | + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- logtivity_view() renders trusted plugin templates. | |
| 78 | + echo logtivity_view('_admin-footer', compact('options')); | |
| 79 | + ?> | |
