Escape outputs
This commit is contained in:
@@ -86,7 +86,7 @@ else :
|
||||
endif;
|
||||
|
||||
if ( $title ) {
|
||||
echo '<h4 class="sp-table-caption">' . $title . '</h4>';
|
||||
echo '<h4 class="sp-table-caption">' . wp_kses_post( $title ) . '</h4>';
|
||||
}
|
||||
|
||||
$gallery_style = $gallery_div = '';
|
||||
@@ -113,9 +113,9 @@ if ( apply_filters( 'use_default_gallery_style', ! $html5 ) ) {
|
||||
}
|
||||
$size_class = sanitize_html_class( $size );
|
||||
$gallery_div = "<div id='$selector' class='gallery galleryid-{$id} gallery-columns-{$columns} gallery-size-{$size_class}'>";
|
||||
echo apply_filters( 'gallery_style', $gallery_style . "\n\t\t" );
|
||||
echo wp_kses_post( apply_filters( 'gallery_style', $gallery_style . "\n\t\t" ) );
|
||||
?>
|
||||
<?php echo $gallery_div; ?>
|
||||
<?php echo wp_kses_post( $gallery_div ); ?>
|
||||
<?php
|
||||
if ( intval( $number ) > 0 ) {
|
||||
$limit = $number;
|
||||
@@ -201,7 +201,7 @@ endforeach;
|
||||
|
||||
echo '<div class="sp-player-gallery-wrapper sp-gallery-wrapper">';
|
||||
|
||||
echo $gallery;
|
||||
echo wp_kses_post( $gallery );
|
||||
|
||||
if ( ! $html5 && $columns > 0 && ++$i % $columns == 0 ) {
|
||||
echo '<br style="clear: both" />';
|
||||
@@ -210,7 +210,7 @@ endforeach;
|
||||
echo '</div>';
|
||||
|
||||
if ( $show_all_players_link && ( 'position' !== $grouping || $j == count( $groups ) ) ) {
|
||||
echo '<div class="sp-player-gallery-link sp-gallery-link sp-view-all-link"><a href="' . get_permalink( $id ) . '">' . __( 'View all players', 'sportspress' ) . '</a></div>';
|
||||
echo '<div class="sp-player-gallery-link sp-gallery-link sp-view-all-link"><a href="' . esc_url( get_permalink( $id ) ) . '">' . esc_attr__( 'View all players', 'sportspress' ) . '</a></div>';
|
||||
}
|
||||
|
||||
echo '</div>';
|
||||
|
||||
Reference in New Issue
Block a user