diff --git a/includes/widgets/displayfeaturedimagegenesis-author-widget.php b/includes/widgets/displayfeaturedimagegenesis-author-widget.php index 6553441..459d8b7 100644 --- a/includes/widgets/displayfeaturedimagegenesis-author-widget.php +++ b/includes/widgets/displayfeaturedimagegenesis-author-widget.php @@ -67,7 +67,7 @@ class Display_Featured_Image_Genesis_Author_Widget extends WP_Widget { $image_id = get_the_author_meta( 'displayfeaturedimagegenesis', $instance['user'] ); $image_src = wp_get_attachment_image_src( $image_id, $instance['featured_image_size'] ); if ( $image_src ) { - echo '' . get_the_author_meta( 'display_name', $instance['user'] ) . ''; + echo '' . esc_html( get_the_author_meta( 'display_name', $instance['user'] ) ) . ''; } } @@ -80,7 +80,7 @@ class Display_Featured_Image_Genesis_Author_Widget extends WP_Widget { $text .= get_avatar( $instance['user'], $instance['size'] ); - if( ! empty( $instance['gravatar_alignment'] ) ) { + if ( ! empty( $instance['gravatar_alignment'] ) ) { $text .= ''; } } @@ -90,14 +90,14 @@ class Display_Featured_Image_Genesis_Author_Widget extends WP_Widget { $text .= $instance['page'] ? sprintf( ' %s', get_page_link( $instance['page'] ), $instance['page_link_text'] ) : ''; // Echo $text - echo wpautop( $text ); + echo wp_kses_post( wpautop( $text ) ); // If posts link option checked, add posts link to output $display_name = get_the_author_meta( 'display_name', $instance['user'] ); - $user_name = ( ! empty ( $display_name ) && genesis_a11y() ) ? '' . $display_name. ': ' : ''; + $user_name = ( ! empty ( $display_name ) && genesis_a11y() ) ? '' . $display_name . ': ' : ''; if ( $instance['posts_link'] && $instance['link_text'] ) { - printf( '', get_author_posts_url( $instance['user'] ), $user_name, $instance['link_text'] ); + printf( '', esc_url( get_author_posts_url( $instance['user'] ) ), esc_attr( $user_name ), esc_attr( $instance['link_text'] ) ); } echo $args['after_widget']; @@ -138,23 +138,23 @@ class Display_Featured_Image_Genesis_Author_Widget extends WP_Widget { ?>

- +

-
+
'authors', 'name' => $this->get_field_name( 'user' ), 'selected' => $instance['user'] ) ); ?>

/> -
+

- + - - - - + + + +

@@ -178,58 +178,58 @@ class Display_Featured_Image_Genesis_Author_Widget extends WP_Widget {

/> -
+
- +

- +

- +

/> -
+
/> -
- +
+

-
+
$this->get_field_name( 'page' ), 'show_option_none' => __( 'None', 'display-featured-image-genesis' ), 'selected' => $instance['page'] ) ); ?>

- +

/> - +

- +

diff --git a/includes/widgets/displayfeaturedimagegenesis-cpt-archive-widget.php b/includes/widgets/displayfeaturedimagegenesis-cpt-archive-widget.php index e9c93d9..1e672b6 100644 --- a/includes/widgets/displayfeaturedimagegenesis-cpt-archive-widget.php +++ b/includes/widgets/displayfeaturedimagegenesis-cpt-archive-widget.php @@ -149,7 +149,7 @@ class Display_Featured_Image_Genesis_Widget_CPT extends WP_Widget { $intro_text = apply_filters( 'display_featured_image_genesis_cpt_description', $intro_text ); - echo $intro_text; + echo wp_kses_post( wpautop( $intro_text ) ); echo genesis_html5() ? '' : ''; @@ -194,7 +194,7 @@ class Display_Featured_Image_Genesis_Widget_CPT extends WP_Widget { ?>

- +

@@ -203,7 +203,7 @@ class Display_Featured_Image_Genesis_Widget_CPT extends WP_Widget {

- + /> - +

/> - +

@@ -246,11 +246,11 @@ class Display_Featured_Image_Genesis_Widget_CPT extends WP_Widget {

/> - +

- + - - - - + + + +

diff --git a/includes/widgets/displayfeaturedimagegenesis-taxonomy-widget.php b/includes/widgets/displayfeaturedimagegenesis-taxonomy-widget.php index 12d0f16..a52c990 100644 --- a/includes/widgets/displayfeaturedimagegenesis-taxonomy-widget.php +++ b/includes/widgets/displayfeaturedimagegenesis-taxonomy-widget.php @@ -105,7 +105,7 @@ class Display_Featured_Image_Genesis_Widget_Taxonomy extends WP_Widget { if ( $instance['show_image'] && $image ) { $role = empty( $instance['show_title'] ) ? '' : 'aria-hidden="true"'; - printf( '%s', esc_url( $permalink ), esc_html( $title ), esc_attr( $instance['image_alignment'] ), $role, $image ); + printf( '%s', esc_url( $permalink ), esc_html( $title ), esc_attr( $instance['image_alignment'] ), esc_attr( $role ), wp_kses_post( $image ) ); } } @@ -131,7 +131,7 @@ class Display_Featured_Image_Genesis_Widget_Taxonomy extends WP_Widget { $intro_text = $term->description; } - echo $intro_text; + echo wp_kses_post( wpautop( $intro_text ) ); echo genesis_html5() ? '' : ''; @@ -175,7 +175,7 @@ class Display_Featured_Image_Genesis_Widget_Taxonomy extends WP_Widget { ?>

- +

@@ -184,7 +184,7 @@ class Display_Featured_Image_Genesis_Widget_Taxonomy extends WP_Widget {

- + /> - +

/> - +

@@ -240,11 +240,11 @@ class Display_Featured_Image_Genesis_Widget_Taxonomy extends WP_Widget {

/> - +

- + - - - - + + + +