Skip to content

Commit b23ddb1

Browse files
committed
escape style attribute
1 parent b546760 commit b23ddb1

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

includes/Elements/Event_Calendar.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -3060,7 +3060,7 @@ public function eaelec_display_table($data, $settings){
30603060
$item_per_page = $is_paginated && !empty( $settings['eael_ec_item_per_page'] ) ? intval( $settings['eael_ec_item_per_page'] ) : 1;
30613061

30623062
?>
3063-
<table class="eael-event-calendar-table <?php echo $is_paginated ? 'ea-ec-table-paginated' : '' ?> ea-ec-table-sortable" data-items-per-page="<?php echo esc_attr( $item_per_page ); ?>">
3063+
<table class="eael-event-calendar-table <?php echo $is_paginated ? 'ea-ec-table-paginated' : ''; ?> ea-ec-table-sortable" data-items-per-page="<?php echo esc_attr( $item_per_page ); ?>">
30643064
<thead>
30653065
<tr style="display: table-row;">
30663066
<?php
@@ -3128,7 +3128,7 @@ public function eaelec_display_table($data, $settings){
31283128
$row_style .= "color:{$event['textColor']};";
31293129
}
31303130

3131-
$row_style = $row_style !== '' ? "style={$row_style}" : '';
3131+
$row_style = $row_style !== '' ? "style={" . esc_attr( $row_style ) . "}" : '';
31323132

31333133
$item_count ++;
31343134
echo '<tr ' . $style . ' >';

0 commit comments

Comments
 (0)