Changeset 3255299

Timestamp:

03/13/2025 10:43:23 AM (11 months ago)

Author:

pipdig

Message:

change escape type

Location:

pipdisqus/trunk

Files:

• comments_template.php (modified) (2 diffs)
• pipdisqus.php (modified) (2 diffs)

pipdisqus/trunk/comments_template.php

@@ -27 +27 @@
 $disqus_shortname = '';
 $options = get_option('pipdisqus_settings');
-$disqus_embed = 'https://'.sanitize_text_field($options['disqus_shortname']).'.disqus.com/embed.js';
+$disqus_embed = 'https://'.trim($options['disqus_shortname']).'.disqus.com/embed.js';
 
 ?>
@@ -36 +36 @@
     var disqus_config = function () {
         this.page.url = "<?php the_permalink(); ?>";
-        this.page.identifier = "<?php echo esc_attr($post->ID.' '.$post->guid); ?>";
+        this.page.identifier = "<?php echo esc_js($post->ID.' '.$post->guid); ?>";
         this.page.title = "<?php the_title_attribute(); ?>";
     };
     (function() {
         var d = document, s = d.createElement('script');
-        s.src = '<?php echo esc_url($disqus_embed); ?>';
+        s.src = '<?php echo esc_js($disqus_embed); ?>';
         s.defer = 'defer';
         s.setAttribute('data-timestamp', +new Date());

pipdisqus/trunk/pipdisqus.php

@@ -62 +62 @@
     }
     
-    $disqus_count = 'https://'.sanitize_text_field($options['disqus_shortname']).'.disqus.com/count.js';
+    $disqus_count = 'https://'.trim($options['disqus_shortname']).'.disqus.com/count.js';
     ?>
     <script id="dsq-count-scr" src="<?php echo esc_url($disqus_count); ?>" async defer></script>
@@ -107 +107 @@
     }
     
-    $disqus_url = 'https://'.sanitize_text_field($options['disqus_shortname']).'.disqus.com/admin/moderate/';
+    $disqus_url = 'https://'.trim($options['disqus_shortname']).'.disqus.com/admin/moderate/';
     
     $admin_bar->add_menu( array(