Skip to content

Commit 6392561

Browse files
Escape shortcode attribute value Codeinwp/visualizer-pro#365
1 parent 39559e5 commit 6392561

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

classes/Visualizer/Module/Frontend.php

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -305,6 +305,11 @@ public function renderChart( $atts ) {
305305
$atts
306306
);
307307

308+
$atts['id'] = (int) $atts['id'];
309+
$atts['class'] = esc_attr( $atts['class'] );
310+
$atts['lazy'] = esc_attr( $atts['lazy'] );
311+
$atts['use_image'] = esc_attr( $atts['use_image'] );
312+
308313
global $sitepress;
309314
if ( Visualizer_Module::is_pro() && ( function_exists( 'icl_get_languages' ) && $sitepress instanceof \SitePress ) ) {
310315
global $sitepress;

0 commit comments

Comments
 (0)