# speechkit/7.0.0/src/player/renderer/class-javascript.php

BeyondWords – AI audio for publishers, version 7.0.0. 56 lines.

- Page: https://pluginprobe.com/plugins/speechkit/7.0.0/code/src/player/renderer/class-javascript.php
- Raw: https://pluginprobe.com/plugins/speechkit/7.0.0/raw/src/player/renderer/class-javascript.php
- Modified: 2026-08-12T09:46:22+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/speechkit/7.0.0/code/src/player/renderer/class-javascript.php#L10-L20`.

```php
<?php
/**
 * JavaScript BeyondWords player renderer.
 *
 * @package BeyondWords\Player\Renderer
 * @since   6.0.0
 * @since   7.0.0 Refactored to BeyondWords namespace with snake_case methods.
 */

declare( strict_types = 1 );

namespace BeyondWords\Player\Renderer;

defined( 'ABSPATH' ) || exit;

/**
 * Renders the BeyondWords player as a SDK script tag with an inline init call.
 *
 * @since 7.0.0 Refactored to BeyondWords namespace with snake_case methods.
 */
class Javascript extends Base {

	/**
	 * Render the JavaScript player HTML.
	 *
	 * @param \WP_Post $post    Post object.
	 * @param string   $context Rendering context: 'auto' or 'shortcode'.
	 */
	public static function render( \WP_Post $post, string $context = 'shortcode' ): string {
		if ( \BeyondWords\Settings\Fields::PLAYER_UI_DISABLED === get_option( \BeyondWords\Settings\Fields::OPTION_PLAYER_UI ) ) {
			return '';
		}

		$params = \BeyondWords\Player\ConfigBuilder::build( $post );

		// The HEX flags escape ', ", <, >, & inside string values so attacker- or
		// filter-controlled params can't break out of the quoted onload attribute.
		$json_params = wp_json_encode(
			$params,
			JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_HEX_AMP
		);
		$json_params = sprintf( '{target:this, ...%s}', $json_params );

		$onload = sprintf( 'new BeyondWords.Player(%s);', $json_params );
		$onload = apply_filters( 'beyondwords_player_script_onload', $onload, $params );

		return sprintf(
			// phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedScript
			'<script data-beyondwords-player-context="%s" async defer src="%s" onload=\'%s\'></script>',
			esc_attr( $context ),
			esc_url( \BeyondWords\Core\Urls::get_js_sdk_url() ),
			esc_attr( $onload )
		);
	}
}

```