← All changes
|
includes/elementor/modules/order-details/items/item-base.php
+15
-9
1.2.5
→
2.7.0
View file →
| @@ -202,9 +202,9 @@ | ||
| 202 | 202 | 'elementor-sm-' . $field['width_mobile'] |
| 203 | 203 | ); |
| 204 | 204 | } |
| 205 | 205 | ?> |
| 206 | - <li <?php echo $this->widget->get_render_attribute_string( 'item-group-' . $this->get_id() ); ?>> | |
| 206 | + <li <?php echo $this->widget->get_render_attribute_string( 'item-group-' . esc_attr( $this->get_id() ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Elementor-generated attributes. ?>> | |
| 207 | 207 | <div class="order-details-heading-group"> |
| 208 | 208 | <?php |
| 209 | 209 | $this->render_icon(); |
| 210 | 210 | $this->render_label(); |
| @@ -253,12 +253,11 @@ | ||
| 253 | 253 | if ( empty( $this->get_label() ) ) { |
| 254 | 254 | return; |
| 255 | 255 | } |
| 256 | 256 | ?> |
| 257 | - <h5 | |
| 258 | - class="sellkit-order-details-heading"> | |
| 259 | - <?php echo $this->get_label(); ?> | |
| 260 | - </h5> | |
| 257 | + <h5 class="sellkit-order-details-heading"> | |
| 258 | + <?php echo wp_kses_post( $this->get_label() ); ?> | |
| 259 | + </h5> | |
| 261 | 260 | <?php |
| 262 | 261 | } |
| 263 | 262 | |
| 264 | 263 | /** |
| @@ -286,13 +285,20 @@ | ||
| 286 | 285 | * @since 1.1.0 |
| 287 | 286 | * @access public |
| 288 | 287 | */ |
| 289 | 288 | public function check_order_page() { |
| 290 | - // phpcs:ignore | |
| 291 | - $key = isset( $_GET['order-key'] ) ? sanitize_text_field( $_GET['order-key'] ) : false; | |
| 292 | - $id = wc_get_order_id_by_order_key( $key ); | |
| 289 | + $key = filter_input( INPUT_GET, 'order-key', FILTER_SANITIZE_FULL_SPECIAL_CHARS ); | |
| 290 | + if ( empty( $key ) ) { | |
| 291 | + $key = filter_input( INPUT_GET, 'key', FILTER_SANITIZE_FULL_SPECIAL_CHARS ); | |
| 292 | + } | |
| 293 | 293 | |
| 294 | - if ( $key && ! empty( $this->funnel->funnel_id ) ) { | |
| 294 | + $global_thankyou = apply_filters( 'sellkit_global_thankyou', false ); | |
| 295 | + $id = wc_get_order_id_by_order_key( $key ); | |
| 296 | + | |
| 297 | + if ( | |
| 298 | + $key && ! empty( $this->funnel->funnel_id ) || | |
| 299 | + $key && $global_thankyou | |
| 300 | + ) { | |
| 295 | 301 | $order = wc_get_order( $id ); |
| 296 | 302 | $order_data = $order->get_data(); |
| 297 | 303 | |
| 298 | 304 | $this->render_content( $order_data ); |