| @@ -28,9 +28,9 @@ | ||
| 28 | 28 | trait Entry_Parser { |
| 29 | 29 | /** |
| 30 | 30 | * Parse a raw entry array into the standard response shape. |
| 31 | 31 | * |
| 32 | - * Handles form data decryption, form title lookup, | |
| 32 | + * Handles form data decoding, form title lookup, | |
| 33 | 33 | * submission info building (with IP masking), and user info. |
| 34 | 34 | * |
| 35 | 35 | * @param array<string,mixed> $entry Raw entry from the database. |
| 36 | 36 | * @since 2.5.2 |
| @@ -36,9 +36,9 @@ | ||
| 36 | 36 | * @since 2.5.2 |
| 37 | 37 | * @return array<string,mixed> Parsed entry data (without entry_id — caller prepends it). |
| 38 | 38 | */ |
| 39 | 39 | protected function parse_entry( array $entry ) { |
| 40 | - // Parse form data with decrypted labels. | |
| 40 | + // Parse form data with decoded labels (submitter-controlled; escape at the sink). | |
| 41 | 41 | $form_data = []; |
| 42 | 42 | $excluded_fields = Helper::get_excluded_fields(); |
| 43 | 43 | $entry_form_data = $entry['form_data'] ?? []; |
| 44 | 44 | |
| @@ -52,9 +52,9 @@ | ||
| 52 | 52 | } |
| 53 | 53 | |
| 54 | 54 | $label_parts = explode( '-lbl-', $field_name ); |
| 55 | 55 | $label = isset( $label_parts[1] ) ? explode( '-', $label_parts[1] )[0] : ''; |
| 56 | - $label = $label ? Helper::decrypt( $label ) : ''; | |
| 56 | + $label = $label ? Helper::decode( $label ) : ''; | |
| 57 | 57 | $field_block_name = Helper::get_block_name_from_field( $field_name ); |
| 58 | 58 | |
| 59 | 59 | $form_data[] = [ |
| 60 | 60 | 'label' => $label, |
