← All changes | elementor-elements/views/wdk-field-value.php +5 -5 1.5.6 → 1.5.9 View file →

		@@ -109,13 +109,13 @@
109	109	if (wdk_is_listing_page_enabled() && isset($wdk_listing_id)) {
110	110	$url = get_permalink($wdk_listing_id);
111	111	}
112	112	?>
113		- <a href="<?php echo $url; ?>">
	113	+ <a href="<?php echo esc_url($url); ?>">
114	114	<span class='prefix'><?php echo esc_html($field_prefix); ?></span>
115	115	<span class="value <?php if (wmvc_show_data('text_limit_per_line', $settings)): ?> wdk-stroke <?php endif; ?>">
116	116	<?php if (wmvc_show_data('text_limit_worlds', $settings)): ?>
117		- <?php echo (wp_strip_all_tags(html_entity_decode(wp_trim_words($field_value, $settings['text_limit_worlds'], '...')))); ?>
	117	+ <?php echo wp_kses_post(wp_strip_all_tags(html_entity_decode(wp_trim_words($field_value, $settings['text_limit_worlds'], '...')))); ?>
118	118	<?php else: ?>
119	119	<?php echo wp_kses_post(wp_unslash(wdk_filter_decimal($field_value))); ?>
120	120	<?php endif; ?>
121	121	</span>
		@@ -122,9 +122,9 @@
122	122	<span class='suffix'><?php echo esc_html($field_suffix); ?></span>
123	123	</a>
124	124
125	125	<?php else: ?>
126		- <?php echo empty(wmvc_show_data('html_tag', $settings, 'span')) ? '<span>' : '<' . wmvc_show_data('html_tag', $settings, 'span') . '>'; ?>
	126	+ <?php echo empty(wmvc_show_data('html_tag', $settings, 'span')) ? '<span>' : '<' . esc_html(wmvc_show_data('html_tag', $settings, 'span')) . '>'; ?>
127	127	<span class='prefix'><?php echo esc_html($field_prefix); ?></span>
128	128
129	129
130	130	<?php if (stripos($field_value, 'class="value"') !== FALSE): ?>
		@@ -131,9 +131,9 @@
131	131	<?php echo wp_kses_post(wdk_filter_decimal($field_value)); ?>
132	132	<?php else: ?>
133	133	<span class="value <?php if (wmvc_show_data('text_limit_per_line', $settings)): ?> wdk-stroke <?php endif; ?>">
134	134	<?php if (wmvc_show_data('text_limit_worlds', $settings)): ?>
135		- <?php echo (wp_strip_all_tags(html_entity_decode(wp_trim_words($field_value, $settings['text_limit_worlds'], '...')))); ?>
	135	+ <?php echo wp_kses_post(wp_strip_all_tags(html_entity_decode(wp_trim_words($field_value, $settings['text_limit_worlds'], '...')))); ?>
136	136	<?php else: ?>
137	137	<?php echo wp_kses_post(wp_unslash(wdk_filter_decimal($field_value))); ?>
138	138	<?php endif; ?>
139	139	</span>
		@@ -139,9 +139,9 @@
139	139	</span>
140	140	<?php endif; ?>
141	141
142	142	<span class='suffix'><?php echo esc_html($field_suffix); ?></span>
143		- <?php echo empty(wmvc_show_data('html_tag', $settings, 'span')) ? '</span>' : '</' . wmvc_show_data('html_tag', $settings, 'span') . '>'; ?>
	143	+ <?php echo empty(wmvc_show_data('html_tag', $settings, 'span')) ? '</span>' : '</' . esc_html(wmvc_show_data('html_tag', $settings, 'span')) . '>'; ?>
144	144	<?php endif; ?>
145	145	</div>
146	146	<?php endif; ?>
147	147	</div>