diff --git a/includes/MslsAdminIcon.php b/includes/MslsAdminIcon.php
index d390785c..d42e475f 100644
--- a/includes/MslsAdminIcon.php
+++ b/includes/MslsAdminIcon.php
@@ -243,15 +243,16 @@ public function get_icon(): string {
$icon = sprintf(
'%s',
esc_attr( $this->language ),
- wp_kses( $text, Component::get_allowed_html() )
+ $text
);
+
break;
default:
$class = empty( $this->href ) ? 'dashicons-plus' : 'dashicons-edit';
$icon = sprintf( '', esc_attr( $class ) );
}
- return $icon;
+ return wp_kses( $icon, Component::get_allowed_html() );
}
/**
diff --git a/includes/MslsCustomColumn.php b/includes/MslsCustomColumn.php
index 5876c49f..6787de8a 100644
--- a/includes/MslsCustomColumn.php
+++ b/includes/MslsCustomColumn.php
@@ -93,10 +93,13 @@ public function td( $column_name, $item_id ): void {
$icon->set_href( (int) $mydata->$language );
}
- printf(
- '%2$s',
- esc_attr( $this->options->get_icon_type() ),
- wp_kses( $icon->get_a(), Component::get_allowed_html() )
+ echo wp_kses(
+ sprintf(
+ '%2$s',
+ esc_attr( $this->options->get_icon_type() ),
+ $icon->get_a()
+ ),
+ Component::get_allowed_html()
);
restore_current_blog();
diff --git a/includes/MslsPostTag.php b/includes/MslsPostTag.php
index af7a7d19..54aa3b4a 100644
--- a/includes/MslsPostTag.php
+++ b/includes/MslsPostTag.php
@@ -8,6 +8,8 @@
namespace lloc\Msls;
+use lloc\Msls\Component\Component;
+
/**
* Post Tag
*
@@ -160,7 +162,12 @@ public function the_input( ?\WP_Term $tag, string $title_format, string $item_fo
$this->maybe_set_linked_term( $mydata );
- printf( wp_kses_post( $title_format ), esc_html( $this->get_select_title() ), esc_attr( $type ) );
+ $allowed_html = Component::get_allowed_html();
+
+ echo wp_kses(
+ sprintf( $title_format, esc_html( $this->get_select_title() ), esc_attr( $type ) ),
+ $allowed_html
+ );
foreach ( $blogs as $blog ) {
switch_to_blog( $blog->userblog_id );
@@ -179,7 +186,10 @@ public function the_input( ?\WP_Term $tag, string $title_format, string $item_fo
}
}
- printf( wp_kses_post( $item_format ), esc_attr( $blog->userblog_id ), wp_kses_post( $icon ), esc_attr( $language ), esc_attr( $value ), esc_attr( $title ) );
+ echo wp_kses(
+ sprintf( $item_format, esc_attr( $blog->userblog_id ), $icon, esc_attr( $language ), esc_attr( $value ), esc_attr( $title ) ),
+ $allowed_html
+ );
restore_current_blog();
}
diff --git a/includes/MslsPostTagClassic.php b/includes/MslsPostTagClassic.php
index f2d8ad7b..70831934 100644
--- a/includes/MslsPostTagClassic.php
+++ b/includes/MslsPostTagClassic.php
@@ -79,7 +79,10 @@ public function the_input( ?\WP_Term $tag, string $title_format, string $item_fo
$this->maybe_set_linked_term( $mydata );
- printf( wp_kses( $title_format, Component::get_allowed_html() ), esc_html( $this->get_select_title() ) );
+ echo wp_kses(
+ sprintf( $title_format, esc_html( $this->get_select_title() ), esc_attr( $type ) ),
+ Component::get_allowed_html()
+ );
foreach ( $blogs as $blog ) {
$this->print_option( $blog, $type, $mydata, $item_format );
@@ -128,7 +131,10 @@ public function print_option( MslsBlog $blog, string $type, MslsOptionsTax $myda
}
}
- printf( wp_kses_post( $item_format ), esc_attr( $language ), wp_kses_post( $icon ), wp_kses_post( $options ) );
+ echo wp_kses(
+ sprintf( $item_format, esc_attr( $language ), $icon, $options ),
+ Component::get_allowed_html()
+ );
restore_current_blog();
}