Escape vars on Importer Main Class
This commit is contained in:
@@ -101,7 +101,7 @@ if ( class_exists( 'WP_Importer' ) ) {
|
|||||||
<select name="sp_columns[]" data-index="<?php echo array_search( $selected, array_keys( $this->columns ) ); ?>">
|
<select name="sp_columns[]" data-index="<?php echo array_search( $selected, array_keys( $this->columns ) ); ?>">
|
||||||
<option value="0">— <?php _e( 'Disable', 'sportspress' ); ?> —</option>
|
<option value="0">— <?php _e( 'Disable', 'sportspress' ); ?> —</option>
|
||||||
<?php foreach ( $this->columns as $key => $label ): ?>
|
<?php foreach ( $this->columns as $key => $label ): ?>
|
||||||
<option value="<?php echo $key; ?>" <?php selected( $selected, $key ); ?>><?php echo $label; ?></option>
|
<option value="<?php echo esc_attr( $key ); ?>" <?php selected( $selected, $key ); ?>><?php echo esc_attr( $label ); ?></option>
|
||||||
<?php endforeach; ?>
|
<?php endforeach; ?>
|
||||||
</select>
|
</select>
|
||||||
<?php
|
<?php
|
||||||
|
|||||||
Reference in New Issue
Block a user