Changeset 13816 for trunk/src/bp-activity/bp-activity-embeds.php
- Timestamp:
- 04/27/2024 05:51:41 PM (20 months ago)
- File:
-
- 1 edited
-
trunk/src/bp-activity/bp-activity-embeds.php (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/bp-activity/bp-activity-embeds.php
r13743 r13816 73 73 // Grab contents of CSS file and do some rudimentary CSS protection. 74 74 $css = file_get_contents( $css['file'] ); 75 $css = wp_kses( $css, array( "\'", '\"' ) ); 76 77 printf( '<style type="text/css">%s</style>', $css ); 75 76 printf( '<style type="text/css">%s</style>', wp_kses( $css, array( "\'", '\"' ) ) ); 78 77 } 79 78 add_action( 'embed_head', 'bp_activity_embed_add_inline_styles', 20 ); … … 122 121 */ 123 122 function bp_activity_embed_excerpt( $content = '' ) { 123 // Escaping is made in `bp-activity/bp-activity-filters.php`. 124 // phpcs:ignore WordPress.Security.EscapeOutput 124 125 echo bp_activity_get_embed_excerpt( $content ); 125 126 } … … 318 319 printf( '<div class="bp-activity-embed-display-media %s" style="max-width:%spx">%s</div>', 319 320 $thumb_width < $float_width ? 'two-col' : 'one-col', 320 $thumb_width < $float_width ? $width : $thumb_width, 321 $thumb_width < $float_width ? intval( $width ) : intval( $thumb_width ), 322 // phpcs:ignore WordPress.Security.EscapeOutput 321 323 $content 322 324 );
Note: See TracChangeset
for help on using the changeset viewer.