← All changes | includes/bricks-builder-widgets/property-embedded-virtual-tours.php +4 -2 2.2.6 → 2.4.0 View file →

		@@ -62,11 +62,12 @@
62	62
63	63	// Add 'class' attribute to element root tag
64	64	$this->set_attribute( '_root', 'class', $root_classes );
65	65
	66	+ // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Bricks serializes registered attributes through its documented render_attributes() API.
66	67	echo "<div {$this->render_attributes( '_root' )}>";
67	68
68		- echo '<h4>' . __( 'Virtual Tours', 'propertyhive' ) . '</h4>';
	69	+ echo '<h4>' . esc_html__( 'Virtual Tours', 'propertyhive' ) . '</h4>';
69	70
70	71	foreach ( $virtual_tours as $virtual_tour )
71	72	{
72	73	if ( isset($this->settings['oembed']) && $this->settings['oembed'] == 'yes' )
		@@ -71,8 +72,9 @@
71	72	{
72	73	if ( isset($this->settings['oembed']) && $this->settings['oembed'] == 'yes' )
73	74	{
74	75	$embed_code = wp_oembed_get($virtual_tour['url']);
	76	+ // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- wp_oembed_get() uses WordPress provider trust and sanitization; preserve supported provider scripts and trusted PHP filters.
75	77	echo $embed_code;
76	78	}
77	79	else
78	80	{
		@@ -99,5 +101,5 @@
99	101	}
100	102
101	103	echo '</div>';
102	104	}
103		-}
	105	+}