← All changes | includes/builder/modal/modal.php +4 -1 3.0.7 → 3.1.4 View file →

		@@ -1,4 +1,5 @@
	1	+<?php if (! defined('ABSPATH')) exit; // Exit if accessed directly ?>
1	2	<div class="usk-modal-overlay" id="ultimate-builder-kit-builder-modal" style="display: none">
2	3	<div id="ultimate-builder-kit-builder-modal-wrapper">
3	4	<div class="usk-template-modal-header">
4	5	<div class="usk-modal-logo-wrap">
		@@ -15,8 +16,10 @@
15	16	<div class="usk-template-modal-main-wrap">
16	17	<div class="usk-modal-content-wrap">
17	18	<h3 class="usk-modal-title">
18	19	<?php
	20	+// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals -- usk_ / BDTUSK_ / ultimate-store-kit- are this plugin's established public prefixes. Ultimate Store Kit Pro calls into these names, as does third-party integration code, so renaming them is a breaking change. Plugin Check only recognises prefixes derived verbatim from the slug and so reports them as unprefixed.
	21	+
19	22	echo wp_kses(
20	23	sprintf(
21	24	/* translators: 1: Opening span tag, 2: Closing span tag. */
22	25	__( 'Templates Help You %1$sWork Efficiently%2$s', 'ultimate-store-kit' ),
		@@ -35,9 +38,9 @@
35	38	</div>
36	39	<div class="usk-modal-form-wrap">
37	40	<form class="usk-modal-form" method="post">
38	41	<input type="hidden" name="template_id" value="" class="template_id" />
39		- <input type="hidden" name="nonce" value="<?php echo wp_create_nonce('usk-builder'); ?>" />
	42	+ <input type="hidden" name="nonce" value="<?php echo esc_attr(wp_create_nonce('usk-builder')); ?>" />
40	43	<div class="usk-form-title"><?php esc_html_e( 'Choose Template Type', 'ultimate-store-kit' ); ?></div>
41	44	<label for="template_type"><?php esc_html_e( 'Select the type of template you want to work on', 'ultimate-store-kit' ); ?></label>
42	45	<select name="template_type" id="template_type">
43	46	<option value=""><?php esc_html_e( 'select', 'ultimate-store-kit' ); ?></option>