Skip to content
Snippets Groups Projects

Feature/add escaping to templates

Merged Krzysztof Dyszczyk requested to merge feature/add-escaping-to-templates into master
22 files
+ 342
207
Compare changes
  • Side-by-side
  • Inline

Files

+ 18
14
@@ -4,28 +4,32 @@
* @var \WPDesk\View\Renderer\Renderer $renderer
* @var string $name_prefix
* @var string $value
*
* @var string $template_name Real field template.
*
*/
?>
<button
<?php if ($field->has_classes()): ?>
class="<?php echo \esc_attr($field->get_classes()); ?>"
<?php if ( $field->has_classes() ) : ?>
class="<?php echo \esc_attr( $field->get_classes() ); ?>"
<?php endif; ?>
<?php foreach ($field->get_attributes([]) as $key => $val): ?>
<?php echo $key.'="'.\esc_attr($val).'"'; ?>
<?php foreach ( $field->get_attributes( [] ) as $key => $val ) : ?>
<?php echo \esc_attr( $key ) . '="' . \esc_attr( $val ) . '"'; ?>
<?php endforeach; ?>
type="<?php echo \esc_attr($field->get_type()); ?>"
name="<?php echo \esc_attr($name_prefix).'['.\esc_attr($field->get_name()).']'?>"
id="<?php echo \esc_attr($field->get_id()); ?>"
value="<?php echo \esc_html($value); ?>"
type="<?php echo \esc_attr( $field->get_type() ); ?>"
name="<?php echo \esc_attr( $name_prefix ) . '[' . \esc_attr( $field->get_name() ) . ']'; ?>"
id="<?php echo \esc_attr( $field->get_id() ); ?>"
value="<?php echo \esc_html( $value ); ?>"
<?php if ($field->is_required()): ?>required="required"<?php endif; ?>
<?php if ($field->is_disabled()): ?>disabled="disabled"<?php endif; ?>
<?php if ($field->is_readonly()): ?>readonly="readonly"<?php endif; ?>
<?php
if ( $field->is_disabled() ) :
?>
disabled="disabled"<?php endif; ?>
<?php
if ( $field->is_readonly() ) :
?>
readonly="readonly"<?php endif; ?>
><?php echo \esc_html($field->get_label()); ?></button>
><?php echo \esc_html( $field->get_label() ); ?></button>
Loading