Escape outputs

This commit is contained in:
Brian Miyaji
2021-11-13 20:42:08 +09:00
parent 051d3e3055
commit 23ba2446b1
190 changed files with 2837 additions and 2837 deletions

View File

@@ -39,20 +39,20 @@
$logo = '<span class="team-logo logo-' . ( $j % 2 ? 'odd' : 'even' ) . '" title="' . get_the_title( $team ) . '">' . $logo . '</span>';
endif;
echo $logo;
echo wp_kses_post( $logo );
endforeach;
?>
<time class="sp-event-date" datetime="<?php echo get_the_time( 'Y-m-d H:i:s', $id ); ?>">
<?php echo get_the_time( get_option( 'date_format' ), $id ); ?>
<time class="sp-event-date" datetime="<?php echo esc_attr( get_the_time( 'Y-m-d H:i:s', $id ) ); ?>">
<?php echo wp_kses_post( get_the_time( get_option( 'date_format' ), $id ) ); ?>
</time>
<?php
$status = __( 'Preview', 'sportspress' );
$status = esc_attr__( 'Preview', 'sportspress' );
if ( $show_time ) {
?>
<h5 class="sp-event-results">
<?php echo '<span class="sp-result">' . apply_filters( 'sportspress_event_time', sp_get_time( $id ), $id ) . '</span>'; ?>
<?php echo '<span class="sp-result">' . wp_kses_post( apply_filters( 'sportspress_event_time', sp_get_time( $id ), $id ) ) . '</span>'; ?>
</h5>
<?php
}
@@ -60,14 +60,14 @@
if ( $show_results && ! empty( $results ) ) {
?>
<h5 class="sp-event-results">
<?php echo '<span class="sp-result">' . implode( '</span> - <span class="sp-result">', apply_filters( 'sportspress_event_blocks_team_result_or_time', $results, $id ) ) . '</span>'; ?>
<?php echo '<span class="sp-result">' . wp_kses_post( implode( '</span> - <span class="sp-result">', apply_filters( 'sportspress_event_blocks_team_result_or_time', $results, $id ) ) ) . '</span>'; ?>
</h5>
<?php
$status = __( 'Full Time', 'sportspress' );
$status = esc_attr__( 'Full Time', 'sportspress' );
}
?>
<span class="sp-event-status">
<?php echo apply_filters( 'sportspress_event_logos_status', $status, $id ); ?>
<?php echo wp_kses_post( apply_filters( 'sportspress_event_logos_status', $status, $id ) ); ?>
</span>
</td>
</tr>