← All changes
|
includes/elementor-widgets/property-additional-field.php
+8
-8
2.2.6
→
2.4.0
View file →
| @@ -44,9 +44,9 @@ | ||
| 44 | 44 | foreach ( $custom_fields as $custom_field ) |
| 45 | 45 | { |
| 46 | 46 | if ( substr($custom_field['meta_box'], 0, 9) == 'property_' ) |
| 47 | 47 | { |
| 48 | - $options[$custom_field['field_name']] = __( $custom_field['field_label'], 'propertyhive' ); | |
| 48 | + $options[$custom_field['field_name']] = $custom_field['field_label']; | |
| 49 | 49 | } |
| 50 | 50 | } |
| 51 | 51 | foreach ( $custom_fields as $custom_field ) |
| 52 | 52 | { |
| @@ -51,9 +51,9 @@ | ||
| 51 | 51 | foreach ( $custom_fields as $custom_field ) |
| 52 | 52 | { |
| 53 | 53 | if ( substr($custom_field['meta_box'], 0, 7) == 'office_' ) |
| 54 | 54 | { |
| 55 | - $options['office-' . $custom_field['field_name']] = __( $custom_field['field_label'], 'propertyhive' ) . ' (' . __( 'Office custom field', 'propertyhive' ) . ')'; | |
| 55 | + $options['office-' . $custom_field['field_name']] = $custom_field['field_label'] . ' (' . __( 'Office custom field', 'propertyhive' ) . ')'; | |
| 56 | 56 | } |
| 57 | 57 | } |
| 58 | 58 | |
| 59 | 59 | $this->add_control( |
| @@ -185,9 +185,9 @@ | ||
| 185 | 185 | { |
| 186 | 186 | $image = wp_get_attachment_image_src( $field_value, 'full' ); |
| 187 | 187 | if ($image !== FALSE) |
| 188 | 188 | { |
| 189 | - $field_value = '<img src="' . $image[0] . '" alt="">'; | |
| 189 | + $field_value = '<img src="' . esc_url( $image[0] ) . '" alt="">'; | |
| 190 | 190 | } |
| 191 | 191 | } |
| 192 | 192 | } |
| 193 | 193 | } |
| @@ -197,9 +197,9 @@ | ||
| 197 | 197 | } |
| 198 | 198 | |
| 199 | 199 | if ( !empty($field_value) ) |
| 200 | 200 | { |
| 201 | - echo '<div class="elementor-widget-additional-field elementor-widget-additional-field-' . $settings['field'] . '">'; | |
| 201 | + echo '<div class="elementor-widget-additional-field elementor-widget-additional-field-' . esc_attr( $settings['field'] ) . '">'; | |
| 202 | 202 | if ( isset($settings['icon']) && !empty($settings['icon']) ) |
| 203 | 203 | { |
| 204 | 204 | \Elementor\Icons_Manager::render_icon( $settings['icon'], [ 'aria-hidden' => 'true' ] ); |
| 205 | 205 | echo ' '; |
| @@ -205,14 +205,14 @@ | ||
| 205 | 205 | echo ' '; |
| 206 | 206 | } |
| 207 | 207 | if ( isset($settings['before']) && !empty($settings['before']) ) |
| 208 | 208 | { |
| 209 | - echo $settings['before'] . ' '; | |
| 209 | + echo wp_kses_post( $settings['before'] ) . ' '; | |
| 210 | 210 | } |
| 211 | - echo $field_value; | |
| 211 | + echo wp_kses_post( $field_value ); | |
| 212 | 212 | if ( isset($settings['after']) && !empty($settings['after']) ) |
| 213 | 213 | { |
| 214 | - echo ' ' . $settings['after']; | |
| 214 | + echo ' ' . wp_kses_post( $settings['after'] ); | |
| 215 | 215 | } |
| 216 | 216 | echo '</div>'; |
| 217 | 217 | } |
| 218 | 218 | |
| @@ -217,5 +217,5 @@ | ||
| 217 | 217 | } |
| 218 | 218 | |
| 219 | 219 | } |
| 220 | 220 | |
| 221 | -} | |
| 221 | +} | |