@@ -133,31 +133,31 @@ function get_shapely_theme_options() {
133133 echo '<style type="text/css"> ' ;
134134
135135 if ( get_theme_mod ( 'link_color ' ) ) {
136- echo 'a {color: ' . esc_html ( get_theme_mod ( 'link_color ' ) ) . '} ' ;
136+ echo 'a {color: ' . esc_attr ( get_theme_mod ( 'link_color ' ) ) . '} ' ;
137137 }
138138 if ( get_theme_mod ( 'link_hover_color ' ) ) {
139139 echo 'a:hover, a:active, .post-title a:hover,
140140 .woocommerce nav.woocommerce-pagination ul li a:focus, .woocommerce nav.woocommerce-pagination ul li a:hover,
141- .woocommerce nav.woocommerce-pagination ul li span.current { color: ' . esc_html ( get_theme_mod ( 'link_hover_color ' ) ) . ';} ' ;
141+ .woocommerce nav.woocommerce-pagination ul li span.current { color: ' . esc_attr ( get_theme_mod ( 'link_hover_color ' ) ) . ';} ' ;
142142 }
143143
144144 if ( get_theme_mod ( 'button_color ' ) ) {
145145 echo '.btn-filled, .btn-filled:visited, .woocommerce #respond input#submit.alt,
146146 .woocommerce a.button.alt, .woocommerce button.button.alt,
147147 .woocommerce input.button.alt, .woocommerce #respond input#submit,
148148 .woocommerce a.button, .woocommerce button.button,
149- .woocommerce input.button { background: ' . esc_html ( get_theme_mod ( 'button_color ' ) ) . ' !important; border: 2px solid ' . esc_html ( get_theme_mod ( 'button_color ' ) ) . ' !important;} ' ;
149+ .woocommerce input.button { background: ' . esc_attr ( get_theme_mod ( 'button_color ' ) ) . ' !important; border: 2px solid ' . esc_attr ( get_theme_mod ( 'button_color ' ) ) . ' !important;} ' ;
150150 }
151151 if ( get_theme_mod ( 'button_hover_color ' ) ) {
152152 echo '.btn-filled:hover, .woocommerce #respond input#submit.alt:hover,
153153 .woocommerce a.button.alt:hover, .woocommerce button.button.alt:hover,
154154 .woocommerce input.button.alt:hover, .woocommerce #respond input#submit:hover,
155155 .woocommerce a.button:hover, .woocommerce button.button:hover,
156- .woocommerce input.button:hover { background: ' . esc_html ( get_theme_mod ( 'button_hover_color ' ) ) . ' !important; border: 2px solid ' . esc_html ( get_theme_mod ( 'button_hover_color ' ) ) . ' !important;} ' ;
156+ .woocommerce input.button:hover { background: ' . esc_attr ( get_theme_mod ( 'button_hover_color ' ) ) . ' !important; border: 2px solid ' . esc_attr ( get_theme_mod ( 'button_hover_color ' ) ) . ' !important;} ' ;
157157 }
158158
159159 if ( get_theme_mod ( 'social_color ' ) ) {
160- echo '.social-icons li a {color: ' . esc_html ( get_theme_mod ( 'social_color ' ) ) . ' !important ;} ' ;
160+ echo '.social-icons li a {color: ' . esc_attr ( get_theme_mod ( 'social_color ' ) ) . ' !important ;} ' ;
161161 }
162162
163163 echo '</style> ' ;
@@ -481,9 +481,9 @@ function shapely_get_header_logo() {
481481
482482 <a href="<?php echo esc_url ( home_url ( '/ ' ) ); ?> "><?php
483483 if ( $ logo [0 ] != '' ) { ?>
484- <img src="<?php echo $ logo [0 ]; ?> " class="logo" alt="<?php echo esc_html ( get_bloginfo ( 'name ' ) ); ?> "><?php
484+ <img src="<?php echo esc_url ( $ logo [0 ]) ; ?> " class="logo" alt="<?php echo esc_html ( get_bloginfo ( 'name ' ) ); ?> "><?php
485485 } else { ?>
486- <h1 class="site-title"><?php echo esc_html ( get_bloginfo ( 'name ' ) ); ?> </h1 ><?php
486+ <span class="site-title"><?php echo esc_html ( get_bloginfo ( 'name ' ) ); ?> </span ><?php
487487 } ?>
488488 </a><?php
489489}
@@ -586,12 +586,12 @@ function shapely_footer_callout() {
586586 <div class="col-sm-12 text-center p0">
587587 <div class="overflow-hidden">
588588 <div class="col-sm-9">
589- <h3 class="cfa-text"><?php echo esc_html ( get_theme_mod ( 'footer_callout_text ' ) ); ?> </h3>
589+ <h3 class="cfa-text"><?php echo wp_kses_post ( get_theme_mod ( 'footer_callout_text ' ) ); ?> </h3>
590590 </div>
591591 <div class="col-sm-3">
592592 <a href='<?php echo esc_url ( get_theme_mod ( 'footer_callout_link ' ) ); ?> '
593593 class="mb0 btn btn-lg btn-filled cfa-button">
594- <?php echo esc_html ( get_theme_mod ( 'footer_callout_btntext ' ) ); ?>
594+ <?php echo wp_kses_post ( get_theme_mod ( 'footer_callout_btntext ' ) ); ?>
595595 </a>
596596 </div>
597597 </div>
@@ -612,7 +612,7 @@ function shapely_get_attachment_image() {
612612 $ src = wp_get_attachment_image_src ( $ id , 'full ' , false );
613613
614614 if ( ! empty ( $ src [0 ] ) ) {
615- echo $ src [0 ];
615+ echo esc_url ( $ src [0 ]) ;
616616 }
617617
618618 die ();
0 commit comments