Skip to content

pr: [Nightly Fix] - Security - Escape Dashboard Submission Output #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jewel-claw wants to merge 1 commit into
base: master
Choose a base branch
from
Open

pr: [Nightly Fix] - Security - Escape Dashboard Submission Output #50

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions includes/Classes/DashboardWidgetModule.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -105,19 +105,19 @@ private function printStats($stats, $paidStats)
<ul class="wpf_dashboard_stats">
<?php foreach ($stats as $stat) : ?>
<li>
<a title="Form: <?php echo $stat->post_title; ?>"
href="<?php echo admin_url('admin.php?page=wppayform.php#/edit-form/' . $stat->form_id . '/entries/' . $stat->id . '/view'); ?>">
#<?php echo $stat->id; ?> - <?php echo $stat->customer_name; ?>
<a title="Form: <?php echo esc_attr($stat->post_title); ?>"
href="<?php echo esc_url(admin_url('admin.php?page=wppayform.php#/edit-form/' . $stat->form_id . '/entries/' . $stat->id . '/view')); ?>">
#<?php echo absint($stat->id); ?> - <?php echo esc_html($stat->customer_name); ?>
<?php if ($stat->recurring_amount) { ?>
<span class="wpf_status wpf_status_<?php echo $stat->status; ?>">
<?php echo 'subscription'.' '.$stat->status; ?>
<span class="wpf_status wpf_status_<?php echo esc_attr($stat->status); ?>">
<?php echo esc_html('subscription'.' '.$stat->status); ?>
</span>
<?php } else { ?>
<span class="wpf_status wpf_status_<?php echo $stat->payment_status; ?>">
<?php echo 'payment'.' '.$stat->payment_status; ?>
<span class="wpf_status wpf_status_<?php echo esc_attr($stat->payment_status); ?>">
<?php echo esc_html('payment'.' '.$stat->payment_status); ?>
</span>
<?php } ?>
<span class="wpf_total"><?php echo $stat->formattedTotal; ?></span>
<span class="wpf_total"><?php echo esc_html($stat->formattedTotal); ?></span>
</a>
</li>
<?php endforeach; ?>
Expand All @@ -126,7 +126,7 @@ private function printStats($stats, $paidStats)
<div class="wpf_payment_summary">
<b><?php _e('Total Paid & Active Payment Received', 'wppayform'); ?></b>
<?php foreach ($paidStats as $index => $stat) : ?>
<b>(<?php echo $stat->currency; ?>)</b>: <?php echo $stat->formattedTotal; ?> <?php if (count($paidStats) - 1 != $index): ?><br /><?php endif; ?>
<b>(<?php echo esc_html($stat->currency); ?>)</b>: <?php echo esc_html($stat->formattedTotal); ?> <?php if (count($paidStats) - 1 != $index): ?><br /><?php endif; ?>
<?php endforeach; ?>
</div>

Expand All @@ -144,13 +144,13 @@ class="button button-primary">
<?php elseif (!defined('NINJA_TABLES_DIR_URL')) : ?>
<div class="wpf_recommended_plugin">
Recommended Plugin: <b>Ninja Tables</b> - Best Table Plugin for WP -
<a href="<?php echo $this->getInstallUrl('ninja-tables'); ?>">Install</a>
<a href="<?php echo esc_url($this->getInstallUrl('ninja-tables')); ?>">Install</a>
| <a target="_blank" rel="noopener" href="https://wordpress.org/plugins/ninja-tables/">Learn More</a>
</div>
<?php elseif (!defined('ENHANCED_BLOCKS_VERSION')) : ?>
<div class="wpf_recommended_plugin">
Recommended Plugin: <b>Enhanced Blocks – Page Builder Blocks for Gutenberg</b> <br/>
<a href="<?php echo $this->getInstallUrl('enhanced-blocks'); ?>">Install</a>
<a href="<?php echo esc_url($this->getInstallUrl('enhanced-blocks')); ?>">Install</a>
| <a target="_blank" rel="noopener" href="https://wordpress.org/plugins/enhanced-blocks/">Learn More</a>
</div>
<?php endif; ?>
Expand Down