Changeset 3436785

Timestamp:

01/10/2026 06:34:25 PM (6 weeks ago)

Author:

rermis

Message:

v2.1.11 = * Allow limited html in method desc for product page

Location:

wc-ship-est/tags/2.1.11

Files:

• . (copied) (copied from wc-ship-est/trunk)
• readme.txt (copied) (copied from wc-ship-est/trunk/readme.txt) (2 diffs)
• wse_functions.php (copied) (copied from wc-ship-est/trunk/wse_functions.php) (4 diffs)

wc-ship-est/tags/2.1.11/readme.txt

@@ -6 +6 @@
 Requires at least: 6.6
 Tested up to: 6.9
-Stable tag: 2.1.9
+Stable tag: 2.1.11
 
 Add a Delivery Estimate or Shipping Method Description to the WooCommerce Cart with a simple, fast and lightweight plugin.
@@ -46 +46 @@
 
 == Changelog ==
+= 2.1.11 = * Allow limited html in method desc for product page
 = 2.1.9 = * Minor bug fixes to shipping method name retrieval
 = 2.1.8 = * Minor bug fixes to variation level estimates.

wc-ship-est/tags/2.1.11/wse_functions.php

@@ -7 +7 @@
 Author URI: https://richardlerma.com/contact/
 Requires Plugins: woocommerce
-Version: 2.1.9
+Version: 2.1.11
 Text Domain: wc-ship-est
-Copyright: (c) 2019-2025 rldd.net - All Rights Reserved
+Copyright: (c) 2019-2026 rldd.net - All Rights Reserved
 License: GPLv3 or later
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
@@ -16 +16 @@
 */
 
-global $wp_version,$wse_version,$wse_pro_version,$wse_version_type; $wse_version='2.1.9';
+global $wp_version,$wse_version,$wse_pro_version,$wse_version_type; $wse_version='2.1.11';
 $wse_version_type='GPL';
 $wse_pro_version=get_option('wse_pro_version');
@@ -172 +172 @@
 
       $prd_dsp=array_map('sanitize_text_field',$_POST['wse_prd_dsp']); update_option('wse_prd_dsp',$prd_dsp);
-      $prd_desc=array_map('sanitize_text_field',$_POST['wse_prd_desc']); update_option('wse_prd_desc',$prd_desc);
+      $desc_allow=['desc'=>[],'strong'=>[],'em'=>[],'b'=>[],'i'=>[],'br'=>[]];
+      $prd_desc=array_map(function($s)use($desc_allow){return wp_kses($s,$desc_allow);},$_POST['wse_prd_desc']); update_option('wse_prd_desc',$prd_desc);
 
       $prds_dsp=array_map('sanitize_text_field',$_POST['wse_prds_dsp']); update_option('wse_prds_dsp',$prds_dsp);
@@ -592 +593 @@
 
                       <div style='background:#EEE;<?php if(empty($prd_dsp[$i])|| !function_exists('wse_itm_est')) echo "display:none;";?>'>
-                        <input type='text' name='wse_prd_desc[]' placeholder='Description' value="<?php if(isset($prd_desc[$i])) echo $prd_desc[$i]; ?>"> Displayed before estimate on product page, e.g. <i>Get it by</i> or <i>Order now for delivery by</i> or <i>Free delivery in</i><br>
+                        <input type='text' name='wse_prd_desc[]' placeholder='Description' value="<?php if(isset($prd_desc[$i])) echo esc_attr($prd_desc[$i]); ?>"> Displayed before estimate on product page, e.g. <i>Get it by</i> or <i>Order now for delivery by</i> or <i>Free delivery in</i><br>
 
                         <div class='user_prds' id='user_prds_dsp<?php echo $i;?>'></div>