| @@ -164,14 +164,15 @@ | ||
| 164 | 164 | echo ' '; |
| 165 | 165 | } |
| 166 | 166 | if ( isset($settings['before']) && !empty($settings['before']) ) |
| 167 | 167 | { |
| 168 | - echo $settings['before'] . ' '; | |
| 168 | + echo wp_kses_post( $settings['before'] ) . ' '; | |
| 169 | 169 | } |
| 170 | + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- The formatter escapes the built-in area text before its trusted PHP HTML output filter. | |
| 170 | 171 | echo $property->get_formatted_floor_area(); |
| 171 | 172 | if ( isset($settings['after']) && !empty($settings['after']) ) |
| 172 | 173 | { |
| 173 | - echo ' ' . $settings['after']; | |
| 174 | + echo ' ' . wp_kses_post( $settings['after'] ); | |
| 174 | 175 | } |
| 175 | 176 | echo '</div>'; |
| 176 | 177 | } |
| 177 | 178 | |
