fixes #31: Closure Notice - Security: Fio bank - transactions

skaut · Aug 14, 2021 · ceca794 · ceca794
1 parent ff0469b
commit ceca794
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/plugin/src/Accounts/Admin.php b/plugin/src/Accounts/Admin.php
@@ -44,14 +44,14 @@ public function TokenFieldContent( \WP_Post $post ) {
 		?>
 		<h2><?php _e( 'Zadejte 64 znakový token z internetového bankovnictví', 'fio-bank-transactions' ); ?>:</h2>
 		<input type="text" name="<?php echo FIOTRANSACTIONS_NAME . '_token'; ?>"
-		       value="<?php echo get_post_meta( $post->ID, FIOTRANSACTIONS_NAME . '_token', true ); ?>"
+		       value="<?php echo esc_attr( get_post_meta( $post->ID, FIOTRANSACTIONS_NAME . '_token', true ) ); ?>"
 		       placeholder="<?php _e( 'token', 'fio-bank-transactions' ); ?>"
 		       class="regular-text"
 		       style="width: 100%;"
 		       pattern="[a-zA-Z0-9]{64}"
 		       required="required"/>
 		<p><a href="http://napoveda.fapi.cz/article/144-jak-vygenerovat-token-ve-fio-bance"
-		        target="_blank"><?php _e( 'Jak získám token?', 'fio-bank-transactions' ); ?></a></p>
+		      target="_blank"><?php _e( 'Jak získám token?', 'fio-bank-transactions' ); ?></a></p>
 		<?php
 	}
 

diff --git a/plugin/src/Accounts/Columns.php b/plugin/src/Accounts/Columns.php
@@ -46,9 +46,9 @@ public function lastModifiedAdminColumnContent( string $columnName, int $postId
 		$modifiedDate   = sprintf( _x( 'Před %s', '%s = human-readable time difference', 'fio-bank-transactions' ), human_time_diff( strtotime( $post->post_modified ), current_time( 'timestamp' ) ) );
 		$modifiedAuthor = get_the_modified_author();
 
-		echo $modifiedDate;
+		echo esc_html( $modifiedDate );
 		echo '<br>';
-		echo '<strong>' . $modifiedAuthor . '</strong>';
+		echo '<strong>' . esc_html( $modifiedAuthor ) . '</strong>';
 
 	}