Tweak: Added more escaping strings

This commit is contained in:
Yakir Sitbon 2022-11-17 15:40:07 +02:00
parent 50d6b7978e
commit 845ba03b0e
2 changed files with 3 additions and 3 deletions

View file

@ -200,7 +200,7 @@ class AAL_Activity_Log_List_Table extends WP_List_Table {
break;

case 'ip':
$return = '<a href="' . $this->get_filtered_link( 'filter_ip', $item->hist_ip ) . '">' . $item->hist_ip. '</a>';
$return = '<a href="' . $this->get_filtered_link( 'filter_ip', $item->hist_ip ) . '">' . esc_html( $item->hist_ip ) . '</a>';
break;

default:

View file

@ -29,9 +29,9 @@ class AAL_Hook_Widgets extends AAL_Hook_Base {
aal_insert_log( array(
'action' => 'deleted',
'object_type' => 'Widget',
'object_subtype' => strtolower( $_REQUEST['sidebar'] ),
'object_subtype' => strtolower( sanitize_text_field( $_REQUEST['sidebar'] ) ),
'object_id' => 0,
'object_name' => $_REQUEST['id_base'],
'object_name' => sanitize_text_field( $_REQUEST['id_base'] ),
) );
}
}