From d0510f516ee5f863f6138176d0afb57585d8ecac Mon Sep 17 00:00:00 2001 From: Joe Dolson Date: Mon, 6 Jan 2025 11:09:24 -0600 Subject: [PATCH] Escaping in main file --- src/my-calendar.php | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/src/my-calendar.php b/src/my-calendar.php index bd722290..b3dab3b4 100644 --- a/src/my-calendar.php +++ b/src/my-calendar.php @@ -75,7 +75,7 @@ function mc_plugin_activated() { $plugin_data = get_plugin_data( __FILE__, false ); // Translators: Name of plug-in, required PHP version, current PHP version. $message = sprintf( __( '%1$s requires PHP version %2$s or higher. Your current PHP version is %3$s', 'my-calendar' ), $plugin_data['Name'], $required_php_version, phpversion() ); - echo "

$message

"; + echo '

' . esc_html( $message ) . '

'; deactivate_plugins( plugin_basename( __FILE__ ) ); exit; } @@ -311,10 +311,10 @@ function mc_show_sidebar( $show = '', $add = false, $remove = false ) { ?>
-

+

-
- +
+
@@ -329,11 +329,11 @@ function mc_show_sidebar( $show = '', $add = false, $remove = false ) {

- Joe Dolson Accessible Web Design + Joe Dolson Accessible Web Design

My Calendar Pro — a more powerful calendar for your site.", 'my-calendar' ), 'https://www.joedolson.com/my-calendar/pro/' ); + echo wp_kses_post( sprintf( __( "Buy My Calendar Pro — a more powerful calendar for your site.", 'my-calendar' ), 'https://www.joedolson.com/my-calendar/pro/' ) ); ?>

@@ -351,7 +351,7 @@ function mc_show_sidebar( $show = '', $add = false, $remove = false ) {

Use My Tickets and sell directly from My Calendar.', 'my-calendar' ), admin_url( 'plugin-install.php?tab=plugin-information&plugin=my-tickets&TB_iframe=true&width=600&height=550' ) ); + echo wp_kses_post( sprintf( __( 'Do you sell tickets to your events? Use My Tickets and sell directly from My Calendar.', 'my-calendar' ), esc_url( admin_url( 'plugin-install.php?tab=plugin-information&plugin=my-tickets&TB_iframe=true&width=600&height=550' ) ) ) ); ?>

@@ -367,7 +367,7 @@ function mc_show_sidebar( $show = '', $add = false, $remove = false ) {

- +