| @@ -19,11 +19,12 @@ | ||
| 19 | 19 | |
| 20 | 20 | <?php do_action( 'propertyhive_property_meta_list_start' ); ?> |
| 21 | 21 | |
| 22 | 22 | <?php |
| 23 | + // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound -- Template-local variable; the template is included through a helper/function scope, so PrefixAllGlobals misclassifies the file when checked standalone. | |
| 23 | 24 | foreach ( $meta as $key => $value ) |
| 24 | 25 | { |
| 25 | - echo '<li class="' . $key . '"><span>' . $value['label'] . ':</span> ' . $value['value'] . '</li>'; | |
| 26 | + echo '<li class="' . esc_attr( $key ) . '"><span>' . esc_html($value['label']) . ':</span> ' . esc_html($value['value']) . '</li>'; | |
| 26 | 27 | } |
| 27 | 28 | ?> |
| 28 | 29 | |
| 29 | 30 | <?php do_action( 'propertyhive_property_meta_list_end' ); ?> |
