Replace settings outputs with suitable escape functions

2021-11-06 20:04:07 +09:00
parent fa8e3fdd73
commit bb597b2658
10 changed files with 18 additions and 18 deletions
--- a/includes/admin/settings/class-sp-settings-general.php
+++ b/includes/admin/settings/class-sp-settings-general.php
@@ -356,7 +356,7 @@ class SP_Settings_General extends SP_Settings_Page {
 		    	<fieldset>
 			    	<?php foreach ( $color_schemes as $name => $colors ) { ?>
 				    	<div class="color-option sp-color-option">
-							<label data-sp-colors="<?php echo implode( ',', $colors ); ?>"><?php echo esc_attr( $name ); ?></label>
+							<label data-sp-colors="<?php echo implode( ',', $colors ); ?>"><?php echo esc_html( $name ); ?></label>
 							<table class="color-palette">
 								<tbody>
 									<tr>