Escape outputs

This commit is contained in:
Brian Miyaji
2021-11-13 20:42:08 +09:00
parent 051d3e3055
commit 23ba2446b1
190 changed files with 2837 additions and 2837 deletions

View File

@@ -86,7 +86,7 @@ else :
endif;
if ( $title ) {
echo '<h4 class="sp-table-caption">' . $title . '</h4>';
echo '<h4 class="sp-table-caption">' . wp_kses_post( $title ) . '</h4>';
}
$gallery_style = $gallery_div = '';
@@ -113,9 +113,9 @@ if ( apply_filters( 'use_default_gallery_style', ! $html5 ) ) {
}
$size_class = sanitize_html_class( $size );
$gallery_div = "<div id='$selector' class='gallery galleryid-{$id} gallery-columns-{$columns} gallery-size-{$size_class}'>";
echo apply_filters( 'gallery_style', $gallery_style . "\n\t\t" );
echo wp_kses_post( apply_filters( 'gallery_style', $gallery_style . "\n\t\t" ) );
?>
<?php echo $gallery_div; ?>
<?php echo wp_kses_post( $gallery_div ); ?>
<?php
if ( intval( $number ) > 0 ) {
$limit = $number;
@@ -201,7 +201,7 @@ endforeach;
echo '<div class="sp-player-gallery-wrapper sp-gallery-wrapper">';
echo $gallery;
echo wp_kses_post( $gallery );
if ( ! $html5 && $columns > 0 && ++$i % $columns == 0 ) {
echo '<br style="clear: both" />';
@@ -210,7 +210,7 @@ endforeach;
echo '</div>';
if ( $show_all_players_link && ( 'position' !== $grouping || $j == count( $groups ) ) ) {
echo '<div class="sp-player-gallery-link sp-gallery-link sp-view-all-link"><a href="' . get_permalink( $id ) . '">' . __( 'View all players', 'sportspress' ) . '</a></div>';
echo '<div class="sp-player-gallery-link sp-gallery-link sp-view-all-link"><a href="' . esc_url( get_permalink( $id ) ) . '">' . esc_attr__( 'View all players', 'sportspress' ) . '</a></div>';
}
echo '</div>';