| @@ -97,9 +97,9 @@ | ||
| 97 | 97 | * @return bool True if saved. |
| 98 | 98 | */ |
| 99 | 99 | public static function save_from_post($post = null) { |
| 100 | 100 | if ($post === null) { |
| 101 | - $post = $_POST; | |
| 101 | + $post = $_POST; // phpcs:ignore WordPress.Security.NonceVerification.Missing -- every caller verifies a nonce and capability first | |
| 102 | 102 | } |
| 103 | 103 | |
| 104 | 104 | // Only save if at least one edge-cache field is present in the payload. |
| 105 | 105 | if (!isset($post['cache_tags_enabled'])) { |
| @@ -260,9 +260,9 @@ | ||
| 260 | 260 | $enabled_key = $key . '_enabled'; |
| 261 | 261 | $is_enabled = !empty($settings[$enabled_key]); |
| 262 | 262 | $border = $is_last ? '' : 'border-bottom: 1px solid var(--dashboard-border); padding-bottom: 20px; margin-bottom: 20px;'; |
| 263 | 263 | ?> |
| 264 | - <div class="metasync-edge-provider" style="<?php echo $border; ?>"> | |
| 264 | + <div class="metasync-edge-provider" style="<?php echo esc_attr($border); ?>"> | |
| 265 | 265 | <label style="display: flex; align-items: center; gap: 10px; margin-bottom: 12px; cursor: pointer;"> |
| 266 | 266 | <input type="hidden" name="<?php echo esc_attr($enabled_key); ?>" value="0" /> |
| 267 | 267 | <input type="checkbox" |
| 268 | 268 | id="metasync-ec-<?php echo esc_attr($key); ?>" |
