From f1467b73623c29522f1a090e1b5775ae658a7c44 Mon Sep 17 00:00:00 2001
From: jewel_bot <jewel_bot@Shahjahans-MacBook-Air.local>
Date: Wed, 11 Mar 2026 02:09:15 +0600
Subject: [PATCH] pr: [Nightly Fix] - Security - Harden Inline JSON Output

---
 app/Hooks/Handlers/EditorBlockHandler.php   | 2 +-
 app/Modules/DataProviders/NinjaFooTable.php | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/Hooks/Handlers/EditorBlockHandler.php b/app/Hooks/Handlers/EditorBlockHandler.php
index 4e37030..0f6f6e7 100644
--- a/app/Hooks/Handlers/EditorBlockHandler.php
+++ b/app/Hooks/Handlers/EditorBlockHandler.php
@@ -51,7 +51,7 @@ public function pushNinjaTablesToEditorFooter()
                 title: '<?php esc_html_e('Insert Ninja Tables Shortcode', 'ninja-tables'); ?>',
                 select_error: '<?php esc_html_e('Please select a table', 'ninja-tables'); ?>',
                 insert_text: '<?php esc_html_e('Insert Shortcode', 'ninja-tables'); ?>',
-                tables: <?php echo json_encode($tables); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped $tables is already escaped before being passed in. ?>,
+                tables: <?php echo wp_json_encode($tables); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped $tables is already escaped before being passed in. ?>,
                 logo: '<?php echo esc_url(NINJA_TABLES_DIR_URL . 'assets/img/ninja-table-editor-button-2x.png'); ?>'
             }
         </script>
diff --git a/app/Modules/DataProviders/NinjaFooTable.php b/app/Modules/DataProviders/NinjaFooTable.php
index c9e02c3..517fc73 100644
--- a/app/Modules/DataProviders/NinjaFooTable.php
+++ b/app/Modules/DataProviders/NinjaFooTable.php
@@ -524,7 +524,7 @@ private static function render($tableArray)
                 $cartItems = WC()->cart->get_cart();
                 ?>
                 <script type="text/javascript">
-                    window['ninjaTableCartItems'] = <?php echo json_encode($cartItems); ?>;
+                    window['ninjaTableCartItems'] = <?php echo wp_json_encode($cartItems); ?>;
                 </script>
                 <?php
             });
@@ -768,7 +768,7 @@ private static function addInlineVars($vars, $table_id, $table_instance_name)
         add_action('wp_footer', function () use ($vars, $table_id, $table_instance_name) {
             ?>
             <script type="text/javascript">
-                window['<?php echo esc_attr($table_instance_name);?>'] = <?php echo json_encode($vars, true); ?>
+                window['<?php echo esc_attr($table_instance_name);?>'] = <?php echo wp_json_encode($vars); ?>
             </script>
             <?php
         });