WordPress.org
Get WordPress

Plugin Directory

Changeset 3320280


Ignore:
Timestamp:
07/01/2025 01:16:34 AM (9 months ago)
Author:
webangon
Message:

Sanitise wp_json_encode

Location:
the-pack-addon/trunk
Files:
1 deleted
33 edited

Legend:

Unmodified
Added
Removed

  • the-pack-addon/trunk/includes/helper-functions.php

    r3318618 r3320280  
    175175    $btn = $text ? '<a ' . $link . ' class="tour-btn">' . $text . '</a>' : '';
    176176
    177     return $btn;
     177    return $btn; 
    178178}
    179179

  • the-pack-addon/trunk/includes/widgets/element/accordion/index.php

    r3281386 r3320280  
    7676            'content',
    7777            [
    78                 'type' => Controls_Manager::WYSIWYG,
     78                'type' => Controls_Manager::TEXTAREA,
    7979                'label' => esc_html__('Content', 'the-pack-addon'),
    8080                'label_block' => true,

  • the-pack-addon/trunk/includes/widgets/element/accordion/view.php

    r3178811 r3320280  
    3232?>
    3333
    34 <?php echo '<div class="xldacdn ' . esc_attr($cls . $settings['lfticn']) . '" data-xld =\'' . wp_json_encode($options) . '\'>'; ?>
     34<?php echo '<div class="xldacdn ' . esc_attr($cls . $settings['lfticn']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($options)) . '\'>'; ?>
    3535<ul class="accordion <?php echo esc_attr($id); ?>">
    3636    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/auto-tab/view.php

    r3318618 r3320280  
    2626?>
    2727
    28 <?php echo '<div class="the-pack-sync auto-tab" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     28<?php echo '<div class="the-pack-sync auto-tab" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    2929    <div class="swiper swiper-sync">
    3030        <div class="swiper-wrapper">

  • the-pack-addon/trunk/includes/widgets/element/card_slider/view.php

    r3318618 r3320280  
    88
    99<div class="blog-slider">
    10     <?php echo '<div class="blog-slider__wrp swiper-wrapper" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     10    <?php echo '<div class="blog-slider__wrp swiper-wrapper" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    1111    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>
    1212    <?php echo $this->content($settings['items'], $settings['img_size']); ?>

  • the-pack-addon/trunk/includes/widgets/element/carousel_parallax/view.php

    r3318618 r3320280  
    2323?>
    2424
    25 <?php echo '<div class="swiper-container parallax-carousel" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     25<?php echo '<div class="swiper-container parallax-carousel" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    2626<div class="swiper-wrapper">
    2727    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/cliendgrid/view.php

    r3318618 r3320280  
    3434    $arrow = $settings['arrow'] ? '<div class="tp-arrow">' . $previkn . $nextikn . '</div>' : '';
    3535
    36     echo '<div class="swiper-container tpswiper clientslide" data-xld =\'' . wp_json_encode($slider_options) . '\'>
     36    echo '<div class="swiper-container tpswiper clientslide" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>
    3737                <div class="swiper-wrapper tb-clientwrap1">';?>
    3838                    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/contact_form/view.php

    r3318618 r3320280  
    3939?>
    4040
    41 <?php echo '<form class="tp-contact-wrap ' . esc_attr($icon_pos) . '" data-xld =\'' . wp_json_encode($options) . '\' novalidate>'; ?>
     41<?php echo '<form class="tp-contact-wrap ' . esc_attr($icon_pos) . '" data-xld =\'' . wp_kses_post(wp_json_encode($options)) . '\' novalidate>'; ?>
    4242<?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>
    4343<?php echo $content; ?>

  • the-pack-addon/trunk/includes/widgets/element/counter_circle/one.php

    r3318618 r3320280  
    1414$desc = $settings['desc'] ? '<p class="desc">' . $settings['desc'] . '</p>' : '';
    1515$out = '
    16         <div data-options=\'' . wp_json_encode($options) . '\' data-size="' . esc_attr($settings['num']['size']) . '" data-prefix="' . esc_attr($settings['pre']) . '" class="client_counterup ' . esc_attr($settings['tmpl']) . '">
     16        <div data-options=\'' . wp_kses_post(wp_json_encode($options)) . '\' data-size="' . esc_attr($settings['num']['size']) . '" data-prefix="' . esc_attr($settings['pre']) . '" class="client_counterup ' . esc_attr($settings['tmpl']) . '">
    1717            <div class="counter_up">
    1818                ' . $pre . '

  • the-pack-addon/trunk/includes/widgets/element/datecounter/view.php

    r3100001 r3320280  
    88    'sec' => esc_attr($settings['secl'])
    99];
    10 echo '<div class="countdown ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_json_encode($data) . '\'></div>';
     10echo '<div class="countdown ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($data)) . '\'></div>';

  • the-pack-addon/trunk/includes/widgets/element/gallery_carousel/view.php

    r3318618 r3320280  
    1616
    1717?>
    18 <?php echo '<div class="swiper-container tp-gallery-slider tpswiper ' .esc_attr($center) . '" data-thop =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     18<?php echo '<div class="swiper-container tp-gallery-slider tpswiper ' .esc_attr($center) . '" data-thop =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    1919<div class="swiper-wrapper">
    2020    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/hover_background/view.php

    r3318618 r3320280  
    3838    ';
    3939}
    40 echo '<div class="bari_assex_slider" data-xld =\'' . wp_json_encode($slider_options) . '\'><div class="flex-equal assex-wrap">';
     40echo '<div class="bari_assex_slider" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'><div class="flex-equal assex-wrap">';
    4141//phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped
    4242echo thepack_build_html($out);

  • the-pack-addon/trunk/includes/widgets/element/image_grid_slider/view.php

    r3318618 r3320280  
    2929    $nav = $settings['nav'] ? '<div class="tp-arrow">' . $previkn . $nextikn . '</div>' : '';
    3030    $dot = $settings['dot'] ? '<div class="swiper-pagination"></div>' : '';
    31     echo '<div class="swiper-container tpswiper tp-img-grid-slider" data-xld =\'' . wp_json_encode($slider_options) . '\'>
     31    echo '<div class="swiper-container tpswiper tp-img-grid-slider" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>
    3232            <div class="swiper-wrapper">';?>
    3333            <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/imgbox_1/view.php

    r3318618 r3320280  
    2929    $nav = $settings['nav'] ? '<div class="tp-arrow">' . $previkn . $nextikn . '</div>' : '';
    3030    $dot = $settings['dot'] ? '<div class="swiper-pagination"></div>' : '';
    31     echo '<div class="swiper-container tpswiper tb-imgbox1" data-thop =\'' . wp_json_encode($slider_options) . '\'>
     31    echo '<div class="swiper-container tpswiper tb-imgbox1" data-thop =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>
    3232            <div class="swiper-wrapper">';?>
    3333                <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/imgbox_4/view.php

    r3318618 r3320280  
    5555
    5656if ($settings['disp'] == 'slider') {
    57     echo '<div class="imgbx4carou swiper-container tpswiper" data-thop =\'' . wp_json_encode($slider_options) . '\'>
     57    echo '<div class="imgbx4carou swiper-container tpswiper" data-thop =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>
    5858                <div class="swiper-wrapper">';?>
    5959                    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/imgslickcarousel/view.php

    r3318618 r3320280  
    2828?>
    2929
    30 <?php echo '<div class="xldslickcarousel ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     30<?php echo '<div class="xldslickcarousel ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    3131<div class='single-item'>
    3232    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/single_slider/view.php

    r3318618 r3320280  
    2323}
    2424
    25 echo '<div data-xld =\'' . wp_json_encode($slider_options) . '\' class="tpsingle-slide ' . esc_attr($settings['pagityp']) . ' ' . esc_attr($settings['arrowtyp']) . '">';
     25echo '<div data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\' class="tpsingle-slide ' . esc_attr($settings['pagityp']) . ' ' . esc_attr($settings['arrowtyp']) . '">';
    2626?>
    2727<div class="swiper-container gallery-top">

  • the-pack-addon/trunk/includes/widgets/element/slider_shop/view.php

    r3318618 r3320280  
    2525<div class="tb-shopslide">
    2626<!-- slides-->
    27 <?php echo '<div class="swiper-container main-slider ' . esc_attr($settings['tmpl']) . ' tpswiper" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     27<?php echo '<div class="swiper-container main-slider ' . esc_attr($settings['tmpl']) . ' tpswiper" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    2828    <div class="swiper-wrapper">
    2929    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/slidercarousel/view.php

    r3318618 r3320280  
    2323
    2424<div class="folio-carousel1">
    25     <?php echo '<div class="swiper-container tpswiper ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     25    <?php echo '<div class="swiper-container tpswiper ' . esc_attr($settings['tmpl']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    2626    <div class="swiper-wrapper">
    2727    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/sliderparallax/view.php

    r3318618 r3320280  
    3535}
    3636
    37 echo '<div class="tp-main-slider ' . esc_attr($settings['trnsl']) . '" data-xld =\'' . wp_json_encode($slider_options) . '\'>';
     37echo '<div class="tp-main-slider ' . esc_attr($settings['trnsl']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>';
    3838?>
    3939<div class="swiper-container">

  • the-pack-addon/trunk/includes/widgets/element/syntax-highlight/view.php

    r3100001 r3320280  
    33  'source' => ('yes' === $settings['source']),
    44];
    5 echo '<div class="tp-syntax-highlight" data-xld =\'' . wp_json_encode($options) . '\'>';
     5echo '<div class="tp-syntax-highlight" data-xld =\'' . wp_kses_post(wp_json_encode($options)) . '\'>';
    66?>
    77  <pre class="code" data-language="<?php echo esc_attr($settings['lang']);?>">

  • the-pack-addon/trunk/includes/widgets/element/team_1/view.php

    r3318618 r3320280  
    33
    44if ($settings['disp'] == 'slider') {
    5     echo '<div class="swiper tpswiper team1carou" data-xld =\'' . wp_json_encode($swiper_opt['settings']) . '\'>
     5    echo '<div class="swiper tpswiper team1carou" data-xld =\'' . wp_kses_post(wp_json_encode($swiper_opt['settings'])) . '\'>
    66                <div class="swiper-wrapper">';?>
    77                    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/team_2/view.php

    r3318618 r3320280  
    1919
    2020if ($settings['disp'] == 'slider') {
    21     echo '<div class="tbteam2 hascarou ' . esc_attr($settings['styl']) . '" data-xld =\'' . wp_json_encode($slider_options) . '\'>
     21    echo '<div class="tbteam2 hascarou ' . esc_attr($settings['styl']) . '" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>
    2222                <div class="swiper-wrapper">';?>
    2323                    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/testimonial_1/one.php

    r3318618 r3320280  
    3333?>
    3434
    35 <?php echo '<div class="swiper testimonial-1 tpswiper" data-xld =\'' . wp_json_encode($swiper_opt['settings']) . '\'>'; ?>
     35<?php echo '<div class="swiper testimonial-1 tpswiper" data-xld =\'' . wp_kses_post(wp_json_encode($swiper_opt['settings'])) . '\'>'; ?>
    3636<div class="swiper-wrapper">
    3737    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/testimonial_1/two.php

    r3318618 r3320280  
    3434?>
    3535
    36 <?php echo '<div class="swiper testimonial-1 tpswiper style-2" data-xld =\'' . wp_json_encode($swiper_opt['settings']) . '\'>'; ?>
     36<?php echo '<div class="swiper testimonial-1 tpswiper style-2" data-xld =\'' . wp_kses_post(wp_json_encode($swiper_opt['settings'])) . '\'>'; ?>
    3737<div class="swiper-wrapper">
    3838    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/testimonial_5/one.php

    r3050466 r3320280  
    3131?>
    3232
    33 <?php echo '<div class="testi5-container" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     33<?php echo '<div class="testi5-container" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    3434<div style="display:none" class="testi5wrap style-one">
    3535  <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/testimonial_5/three.php

    r3050466 r3320280  
    2828?>
    2929
    30 <?php echo '<div class="testi5-container" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     30<?php echo '<div class="testi5-container" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    3131<div style="display:none" class="testi5wrap style-three">
    3232    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/element/testimonial_5/two.php

    r3050466 r3320280  
    2727?>
    2828
    29 <?php echo '<div class="testi5-container" data-xld =\'' . wp_json_encode($slider_options) . '\'>'; ?>
     29<?php echo '<div class="testi5-container" data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\'>'; ?>
    3030<div style="display:none" class="testi5wrap style-two">
    3131    <?php //phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped ?>

  • the-pack-addon/trunk/includes/widgets/theme/full-slider/view.php

    r3318618 r3320280  
    5151
    5252<div class="thepack-slider-four thepack-swiper swiper">
    53   <?php echo '<div class="swiper-wrapper" data-slick =\''.wp_json_encode($slider_options).'\'>';?>
     53  <?php echo '<div class="swiper-wrapper" data-slick =\''.wp_kses_post(wp_json_encode($slider_options)).'\'>';?>
    5454      <?php if ($loop->have_posts()) : ?>
    5555              <?php while ($loop->have_posts()) : $loop->the_post();

  • the-pack-addon/trunk/includes/widgets/woocommerce/woo-product-design/view.php

    r3318618 r3320280  
    2929
    3030   if ($wp_query->have_posts()) {
    31        echo '<div data-xld =\'' . wp_json_encode($slider_options) . '\' class="' . esc_attr($parent_cls) . '">';
     31       echo '<div data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\' class="' . esc_attr($parent_cls) . '">';
    3232       echo '<div class="' . esc_attr($main_cls) . '">';
    3333       if ( wc_get_loop_prop( 'total' ) ) {

  • the-pack-addon/trunk/includes/widgets/woocommerce/woo-related-product/view.php

    r3050466 r3320280  
    3131$wp_query = new \WP_Query( ['post__in' => $id,'post_type' => 'any'] );
    3232if ($wp_query->have_posts()){
    33     echo '<div data-xld =\'' . wp_json_encode($slider_options) . '\' class="' . esc_attr($parent_cls) . '">';
     33    echo '<div data-xld =\'' . wp_kses_post(wp_json_encode($slider_options)) . '\' class="' . esc_attr($parent_cls) . '">';
    3434    echo '<div class="' . esc_attr($main_cls) . '">';   
    3535    while ( $wp_query->have_posts() ) {

  • the-pack-addon/trunk/index.php

    r3318618 r3320280  
    88License: GPLv3 or later
    99License URI: https://www.gnu.org/licenses/gpl-3.0.html
    10 Version: 2.1.4
     10Version: 2.1.5
    1111Text Domain: the-pack-addon
    1212Domain Path: /languages/

  • the-pack-addon/trunk/readme.txt

    r3318618 r3320280  
    44Requires at least: 5.0
    55Tested up to: 6.8
    6 Stable tag: 2.1.4
     6Stable tag: 2.1.5
    77Requires PHP: 7.0
    88License: GPLv3 or later
Note: See TracChangeset for help on using the changeset viewer.