Escape vars on Importer Main Class

This commit is contained in:
Savvas Hadjigeorgiou
2021-11-05 13:51:34 +02:00
parent 630e913fa7
commit 80795b5731

View File

@@ -101,7 +101,7 @@ if ( class_exists( 'WP_Importer' ) ) {
<select name="sp_columns[]" data-index="<?php echo array_search( $selected, array_keys( $this->columns ) ); ?>">
<option value="0">&mdash; <?php _e( 'Disable', 'sportspress' ); ?> &mdash;</option>
<?php foreach ( $this->columns as $key => $label ): ?>
<option value="<?php echo $key; ?>" <?php selected( $selected, $key ); ?>><?php echo $label; ?></option>
<option value="<?php echo esc_attr( $key ); ?>" <?php selected( $selected, $key ); ?>><?php echo esc_attr( $label ); ?></option>
<?php endforeach; ?>
</select>
<?php