From 85d08eae5664302919550c1e040ea6c5766281db Mon Sep 17 00:00:00 2001 From: Savvas Hadjigeorgiou Date: Thu, 11 Nov 2021 13:30:55 +0200 Subject: [PATCH] Escapes based on phpcs #1 --- feeds/ical.php | 2 +- includes/admin/class-sp-admin-dashboard.php | 16 ++++++++-------- .../admin/class-sp-admin-permalink-settings.php | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/feeds/ical.php b/feeds/ical.php index f2e2a1e2..2a06c960 100644 --- a/feeds/ical.php +++ b/feeds/ical.php @@ -13,7 +13,7 @@ if ( ! defined( 'ABSPATH' ) ) { } if ( 'sp_calendar' !== get_post_type( $post ) ) { - wp_die( __( 'ERROR: This is not a valid feed template.', 'sportspress' ), '', array( 'response' => 404 ) ); + wp_die( esc_html__( 'ERROR: This is not a valid feed template.', 'sportspress' ), '', array( 'response' => 404 ) ); } // Get events in calendar diff --git a/includes/admin/class-sp-admin-dashboard.php b/includes/admin/class-sp-admin-dashboard.php index 1724df08..ce89a222 100644 --- a/includes/admin/class-sp-admin-dashboard.php +++ b/includes/admin/class-sp-admin-dashboard.php @@ -58,7 +58,7 @@ if ( ! class_exists( 'SP_Admin_Dashboard' ) ) : else : $output = '' . $text . ''; endif; - echo '
  • ' . esc_html( $output ) . '
  • '; + echo '
  • ' . wp_kses_post( $output ) . '
  • '; endif; endforeach; return $items; @@ -80,21 +80,21 @@ if ( ! class_exists( 'SP_Admin_Dashboard' ) ) : $date = new DateTime( $next_event->post_date ); $interval = date_diff( $now, $date ); ?> -
  • - - %s until next event', 'sportspress' ), $interval->days . ' ' . __( 'days', 'sportspress' ) . ' ' . sprintf( '%02s:%02s:%02s', $interval->h, $interval->i, $interval->s ) ); ?> +
  • + + %s until next event', 'sportspress' ), esc_html( $interval->days ) . ' ' . __( 'days', 'sportspress' ) . ' ' . sprintf( '%02s:%02s:%02s', esc_html( $interval->h ), esc_html( $interval->i ), esc_html( $interval->s ) ) ); ?> (post_title ); ?>)
  • - - %s event scheduled', '%s events scheduled', $scheduled_count, 'sportspress' ), $scheduled_count ); ?> + + %s event scheduled', '%s events scheduled', $scheduled_count, 'sportspress' ) ), esc_attr( $scheduled_count ) ); ?>
  • - - %s event published', '%s events published', $published_count, 'sportspress' ), $published_count ); ?> + + %s event published', '%s events published', $published_count, 'sportspress' ) ), esc_attr( $published_count ) ); ?>
  • diff --git a/includes/admin/class-sp-admin-permalink-settings.php b/includes/admin/class-sp-admin-permalink-settings.php index 73492305..736c0275 100644 --- a/includes/admin/class-sp-admin-permalink-settings.php +++ b/includes/admin/class-sp-admin-permalink-settings.php @@ -78,7 +78,7 @@ if ( ! class_exists( 'SP_Admin_Permalink_Settings' ) ) : * Show the settings */ public function settings() { - echo wpautop( __( 'These settings control the permalinks used for SportsPress. These settings only apply when not using "default" permalinks above.', 'sportspress' ) ); + echo wp_kses_post( wpautop( __( 'These settings control the permalinks used for SportsPress. These settings only apply when not using "default" permalinks above.', 'sportspress' ) ) ); } /**