← All changes
|
includes/elementor/modules/order-details/items/payment-method.php
+4
-4
1.2.5
→
2.7.0
View file →
| @@ -77,13 +77,13 @@ | ||
| 77 | 77 | public function render_content( $order_data ) { |
| 78 | 78 | ?> |
| 79 | 79 | <strong |
| 80 | 80 | <?php |
| 81 | - echo $this->widget->get_render_attribute_string( 'order-details-item-' . $this->get_id() ); | |
| 81 | + echo $this->widget->get_render_attribute_string( 'order-details-item-' . esc_attr( $this->get_id() ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Elementor-generated attributes. | |
| 82 | 82 | ?> |
| 83 | 83 | > |
| 84 | 84 | <?php |
| 85 | - echo $order_data['payment_method']; | |
| 85 | + echo esc_html( $order_data['payment_method'] ); | |
| 86 | 86 | ?> |
| 87 | 87 | </strong> |
| 88 | 88 | <?php |
| 89 | 89 | } |
| @@ -99,13 +99,13 @@ | ||
| 99 | 99 | public function render_dummy_content() { |
| 100 | 100 | ?> |
| 101 | 101 | <strong |
| 102 | 102 | <?php |
| 103 | - echo $this->widget->get_render_attribute_string( 'order-details-item-' . $this->get_id() ); | |
| 103 | + echo $this->widget->get_render_attribute_string( 'order-details-item-' . esc_attr( $this->get_id() ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Elementor-generated attributes. | |
| 104 | 104 | ?> |
| 105 | 105 | > |
| 106 | 106 | <?php |
| 107 | - echo __( 'Cash on delivery...( payment method )', 'sellkit' ) | |
| 107 | + echo esc_html__( 'Cash on delivery...( payment method )', 'sellkit' ) | |
| 108 | 108 | ?> |
| 109 | 109 | </strong> |
| 110 | 110 | <?php |
| 111 | 111 | } |