Plugin Directory

Changeset 2688648


Ignore:
Timestamp:
03/04/2022 05:04:28 AM (4 years ago)
Author:
buzztone
Message:

Fix security issues advised by WordPress Plugin Review Team

Location:
contact-form-7-skins
Files:
10 edited

Legend:

Unmodified
Added
Removed
  • contact-form-7-skins/tags/2.5.1/includes/style.php

    r2684698 r2688648  
    227227                        echo '<div class="filters-group">';
    228228                    }
    229                    
    230                     $feature_name = esc_html( $feature_name );
     229
    231230                    echo '<h4 class="feature-name">' . esc_attr( $feature_name ) . '</h4>';
    232231                    echo '<ol class="feature-group">';
     
    325324                        echo '<div class="filter-group">';
    326325                    }
    327                     $feature_name = esc_html( $feature_name );
    328                     echo '<h4 class="feature-name">' . $feature_name . '</h4>';
     326
     327                    echo '<h4 class="feature-name">' . esc_attr( $feature_name ) . '</h4>';
    329328                    echo '<ol class="feature-group">';
    330329                    foreach ( $features as $feature => $feature_name ) {
     
    399398                $license = strpos( $style['path'], CF7SKINSPRO_PATH ) !== false ? 'pro' : $license;
    400399            ?>
    401             <div class="<?php echo $skin_class; ?>" data-name="<?php echo $key; ?>" data-date="<?php echo $date; ?>" data-license="<?php echo $license; ?>">
     400            <div class="<?php echo esc_attr( $skin_class ); ?>" data-name="<?php echo esc_attr( $key ); ?>" data-date="<?php echo esc_attr( $date ); ?>" data-license="<?php echo esc_attr( $license ); ?>">
    402401                <div class="wrapper">
    403402                    <h4 class="skin-name"><?php echo esc_attr( $style['details']['Style Name'] ); ?></h4>
     
    408407                    </div>
    409408                    <ul class="wp-clearfix skin-action">
    410                         <li><a class="select<?php echo $class; ?> balloon" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.',$this->textdomain ); ?>" data-value="<?php $this->get_slug_name( $style ); ?>" href="#cf7s-style"><?php echo $select_text; ?></a></li>
     409                        <li><a class="select<?php echo esc_attr( $class ); ?> balloon" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.',$this->textdomain ); ?>" data-value="<?php $this->get_slug_name( $style ); ?>" href="#cf7s-style"><?php echo esc_attr( $select_text ); ?></a></li>
    411410                        <li><a class="detail balloon" title="<?php _e( 'Show detailed information about this Style - overview of the appearance and layout with description and usage details.' ,$this->textdomain ); ?>" href="#<?php $this->get_slug_name( $style ); ?>"><?php _e('Details', $this->textdomain ); ?></a></li>
    412411                    </ul>
     
    439438                    <ul class="wp-clearfix skin-action">
    440439                        <li><a class="balloon view" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Use Expanded View to view Styles features - shows all form fields available in Contact Form 7.', $this->textdomain ); ?>"><?php _e('Expanded View', $this->textdomain ); ?></a></li>
    441                         <li><a class="balloon select<?php echo $class; ?>" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.', $this->textdomain ); ?>"><?php echo esc_attr( $select_text ); ?></a></li>
     440                        <li><a class="balloon select<?php echo esc_attr( $class ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.', $this->textdomain ); ?>"><?php echo esc_attr( $select_text ); ?></a></li>
    442441                        <li><a class="balloon close" href="#" title="<?php _e( 'Return to Style Gallery/Grid view.', $this->textdomain ); ?>"><?php _e('Close', $this->textdomain ); ?></a></li>
    443442                    </ul>
  • contact-form-7-skins/tags/2.5.1/includes/tab.php

    r2676847 r2688648  
    244244                    <a class="nav-tab nav-tab-<?php echo esc_attr( $value['name'] ); ?>" href="#tab-<?php echo esc_attr( $value['name'] ); ?>">
    245245                        <?php echo esc_attr( $value['label'] ); ?>
    246                         <span class="help balloon-hover balloon" title="<?php echo $value['note']; ?>">!</span>
    247                         <span class="help balloon-hover balloon" title="<?php echo $value['help']; ?>">?</span>
     246                        <span class="help balloon-hover balloon" title="<?php echo esc_attr( $value['note'] ); ?>">!</span>
     247                        <span class="help balloon-hover balloon" title="<?php echo esc_attr( $value['help'] ); ?>">?</span>
    248248                    </a>
    249249                <?php endforeach; ?>
  • contact-form-7-skins/tags/2.5.1/includes/template.php

    r2684698 r2688648  
    411411                    </div>
    412412                    <ul class="wp-clearfix skin-action">
    413                         <li><a class="select<?php echo $class; ?> balloon" title="<?php _e( 'Select to apply the Template to your form - appears in the form editing area, where you can edit your requirements.',$this->textdomain ); ?>" data-post="<?php echo esc_attr( $post ); ?>" data-locale="<?php echo esc_attr( $locale ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $template ) ); ?>" href="#cf7s-template"><?php echo esc_attr( $select_text ); ?></a></li>
     413                        <li><a class="select<?php echo esc_attr( $class ); ?> balloon" title="<?php _e( 'Select to apply the Template to your form - appears in the form editing area, where you can edit your requirements.',$this->textdomain ); ?>" data-post="<?php echo esc_attr( $post ); ?>" data-locale="<?php echo esc_attr( $locale ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $template ) ); ?>" href="#cf7s-template"><?php echo esc_attr( $select_text ); ?></a></li>
    414414                        <li><a class="detail balloon" title="<?php _e( 'Show detailed information about this Template, with layout, description and usage details.' ,$this->textdomain ); ?>" href="#tpl-<?php esc_attr( $this->get_slug_name( $template ) ); ?>-detail"><?php _e('Details', $this->textdomain ); ?></a></li>
    415415                    </ul>
  • contact-form-7-skins/tags/2.5.1/index.php

    r2676847 r2688648  
    11<?php
    22/**
    3  * Plugin Name: Contact Form 7 Skins
     3 * Plugin Name: Skins for Contact Form 7
    44 * Plugin URI:  http://cf7skins.com
    55 * Description: Adds drag & drop Visual Editor with Templates & Styles to Contact Form 7. Requires Contact Form 7.
  • contact-form-7-skins/tags/2.5.1/readme.txt

    r2684698 r2688648  
    1 === Contact Form 7 Skins ===
     1=== Skins for Contact Form 7 ===
    22Contributors: buzztone
    33Tags: contact form 7, contact form 7 addon, contact form 7 style, contact form 7 theme, contact form
  • contact-form-7-skins/trunk/includes/style.php

    r2684698 r2688648  
    227227                        echo '<div class="filters-group">';
    228228                    }
    229                    
    230                     $feature_name = esc_html( $feature_name );
     229
    231230                    echo '<h4 class="feature-name">' . esc_attr( $feature_name ) . '</h4>';
    232231                    echo '<ol class="feature-group">';
     
    325324                        echo '<div class="filter-group">';
    326325                    }
    327                     $feature_name = esc_html( $feature_name );
    328                     echo '<h4 class="feature-name">' . $feature_name . '</h4>';
     326
     327                    echo '<h4 class="feature-name">' . esc_attr( $feature_name ) . '</h4>';
    329328                    echo '<ol class="feature-group">';
    330329                    foreach ( $features as $feature => $feature_name ) {
     
    399398                $license = strpos( $style['path'], CF7SKINSPRO_PATH ) !== false ? 'pro' : $license;
    400399            ?>
    401             <div class="<?php echo $skin_class; ?>" data-name="<?php echo $key; ?>" data-date="<?php echo $date; ?>" data-license="<?php echo $license; ?>">
     400            <div class="<?php echo esc_attr( $skin_class ); ?>" data-name="<?php echo esc_attr( $key ); ?>" data-date="<?php echo esc_attr( $date ); ?>" data-license="<?php echo esc_attr( $license ); ?>">
    402401                <div class="wrapper">
    403402                    <h4 class="skin-name"><?php echo esc_attr( $style['details']['Style Name'] ); ?></h4>
     
    408407                    </div>
    409408                    <ul class="wp-clearfix skin-action">
    410                         <li><a class="select<?php echo $class; ?> balloon" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.',$this->textdomain ); ?>" data-value="<?php $this->get_slug_name( $style ); ?>" href="#cf7s-style"><?php echo $select_text; ?></a></li>
     409                        <li><a class="select<?php echo esc_attr( $class ); ?> balloon" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.',$this->textdomain ); ?>" data-value="<?php $this->get_slug_name( $style ); ?>" href="#cf7s-style"><?php echo esc_attr( $select_text ); ?></a></li>
    411410                        <li><a class="detail balloon" title="<?php _e( 'Show detailed information about this Style - overview of the appearance and layout with description and usage details.' ,$this->textdomain ); ?>" href="#<?php $this->get_slug_name( $style ); ?>"><?php _e('Details', $this->textdomain ); ?></a></li>
    412411                    </ul>
     
    439438                    <ul class="wp-clearfix skin-action">
    440439                        <li><a class="balloon view" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Use Expanded View to view Styles features - shows all form fields available in Contact Form 7.', $this->textdomain ); ?>"><?php _e('Expanded View', $this->textdomain ); ?></a></li>
    441                         <li><a class="balloon select<?php echo $class; ?>" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.', $this->textdomain ); ?>"><?php echo esc_attr( $select_text ); ?></a></li>
     440                        <li><a class="balloon select<?php echo esc_attr( $class ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $style ) ); ?>" href="#cf7s-style" title="<?php _e( 'Select to apply the Style to your form - is applied to your form once you Save.', $this->textdomain ); ?>"><?php echo esc_attr( $select_text ); ?></a></li>
    442441                        <li><a class="balloon close" href="#" title="<?php _e( 'Return to Style Gallery/Grid view.', $this->textdomain ); ?>"><?php _e('Close', $this->textdomain ); ?></a></li>
    443442                    </ul>
  • contact-form-7-skins/trunk/includes/tab.php

    r2676847 r2688648  
    244244                    <a class="nav-tab nav-tab-<?php echo esc_attr( $value['name'] ); ?>" href="#tab-<?php echo esc_attr( $value['name'] ); ?>">
    245245                        <?php echo esc_attr( $value['label'] ); ?>
    246                         <span class="help balloon-hover balloon" title="<?php echo $value['note']; ?>">!</span>
    247                         <span class="help balloon-hover balloon" title="<?php echo $value['help']; ?>">?</span>
     246                        <span class="help balloon-hover balloon" title="<?php echo esc_attr( $value['note'] ); ?>">!</span>
     247                        <span class="help balloon-hover balloon" title="<?php echo esc_attr( $value['help'] ); ?>">?</span>
    248248                    </a>
    249249                <?php endforeach; ?>
  • contact-form-7-skins/trunk/includes/template.php

    r2684698 r2688648  
    411411                    </div>
    412412                    <ul class="wp-clearfix skin-action">
    413                         <li><a class="select<?php echo $class; ?> balloon" title="<?php _e( 'Select to apply the Template to your form - appears in the form editing area, where you can edit your requirements.',$this->textdomain ); ?>" data-post="<?php echo esc_attr( $post ); ?>" data-locale="<?php echo esc_attr( $locale ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $template ) ); ?>" href="#cf7s-template"><?php echo esc_attr( $select_text ); ?></a></li>
     413                        <li><a class="select<?php echo esc_attr( $class ); ?> balloon" title="<?php _e( 'Select to apply the Template to your form - appears in the form editing area, where you can edit your requirements.',$this->textdomain ); ?>" data-post="<?php echo esc_attr( $post ); ?>" data-locale="<?php echo esc_attr( $locale ); ?>" data-value="<?php esc_attr( $this->get_slug_name( $template ) ); ?>" href="#cf7s-template"><?php echo esc_attr( $select_text ); ?></a></li>
    414414                        <li><a class="detail balloon" title="<?php _e( 'Show detailed information about this Template, with layout, description and usage details.' ,$this->textdomain ); ?>" href="#tpl-<?php esc_attr( $this->get_slug_name( $template ) ); ?>-detail"><?php _e('Details', $this->textdomain ); ?></a></li>
    415415                    </ul>
  • contact-form-7-skins/trunk/index.php

    r2676847 r2688648  
    11<?php
    22/**
    3  * Plugin Name: Contact Form 7 Skins
     3 * Plugin Name: Skins for Contact Form 7
    44 * Plugin URI:  http://cf7skins.com
    55 * Description: Adds drag & drop Visual Editor with Templates & Styles to Contact Form 7. Requires Contact Form 7.
  • contact-form-7-skins/trunk/readme.txt

    r2684698 r2688648  
    1 === Contact Form 7 Skins ===
     1=== Skins for Contact Form 7 ===
    22Contributors: buzztone
    33Tags: contact form 7, contact form 7 addon, contact form 7 style, contact form 7 theme, contact form
Note: See TracChangeset for help on using the changeset viewer.