elementor
diff --git a/‎.github/workflows/phpunit.yml‎
Lines changed: 10 additions & 3 deletions b/‎.github/workflows/phpunit.yml‎
Lines changed: 10 additions & 3 deletions
diff --git a/‎.gitignore‎
Lines changed: 1 addition & 0 deletions b/‎.gitignore‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎README.md‎
Lines changed: 9 additions & 2 deletions b/‎README.md‎
Lines changed: 9 additions & 2 deletions
diff --git a/‎modules/core/components/skip-link.php‎
Lines changed: 1 addition & 1 deletion b/‎modules/core/components/skip-link.php‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎modules/legacy/components/frontend.php‎
Lines changed: 3 additions & 3 deletions b/‎modules/legacy/components/frontend.php‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎modules/legacy/components/settings.php‎
Lines changed: 58 additions & 8 deletions b/‎modules/legacy/components/settings.php‎
Lines changed: 58 additions & 8 deletions
@@ -23,7 +23,7 @@ jobs:
       fail-fast: false
       matrix:
         php: [7.4, 8.0, 8.1, 8.2]
-        wp: [6.5.x, 6.6.x, latest, nightly]
+        wp: [6.5.x, 6.6.x, 6.7.x, latest, nightly]
         ms: [no, yes]
         coverage: [no]
         phpunit: [9]
@@ -53,6 +53,13 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
+      - name: Install SVN
+        run: |
+          sudo apt-get update -y
+          sudo apt-get install -y subversion
+          which svn
+          svn --version
+
       - name: Matrix variables
         id: matrix
         run: |
@@ -104,7 +111,7 @@ jobs:
         run: npm run build
 
       - name: Set up WordPress and WordPress Test Library
-        uses: bainternet/setup-wordpress-test-library@master
+        uses: sjinks/setup-wordpress-test-library@master
         with:
           version: ${{ matrix.wp }}
 
@@ -132,4 +139,4 @@ jobs:
           if [ "${{ steps.coverage.outputs.coverage }}" != 'none' ]; then
             OPTIONS="$OPTIONS --coverage-clover=clover.xml"
           fi
-          phpunit --order-by=random ${OPTIONS}
+          phpunit --order-by=random ${OPTIONS}
@@ -18,3 +18,4 @@ coverage/
 .vscode
 .env
 *.zip
+.qodo
@@ -3,9 +3,9 @@
 **Contributors:** elemntor \
 **Tags:** Web Accessibility, Accessibility, A11Y, WCAG, Accessibility Statement \
 **Requires at least:** 6.5 \
-**Tested up to:** 6.7 \
+**Tested up to:** 6.8 \
 **Requires PHP:** 7.4 \
-**Stable tag:** 3.1.0 \
+**Stable tag:** 3.2.0 \
 **License:** GPLv2 or later
 
 Ally is a web accessibility plugin that enhances usability, offers custom controls, and auto-generates accessibility statements to help meet WCAG guidelines.
@@ -197,6 +197,13 @@ An accessibility statement is a declaration of your commitment to providing an i
 
 ## Changelog
 
+### 3.2.0 - 2025-04-20
+
+New: Added border radius controls for the new icon widget
+Tweak: Added Hungarian translations to the new widget
+Fix: Improved German translations in the new widget
+Fix: Enhanced sanitization in the legacy widget to prevent potential security issues
+
 ### 3.1.0 2025-03-25
 
 * New: Screen Reader – Improved accessibility with screen reader compatibility.
 
@@ -18,7 +18,7 @@ public function get_name(): string {
 	public function enqueue_skip_link_styles() {
 		wp_enqueue_style(
 			'ea11y-skip-link',
-			EA11Y_ASSETS_URL . '/css/skip-link.css',
+			EA11Y_ASSETS_URL . 'build/skip-link.css',
 			[],
 			EA11Y_VERSION
 		);
 
@@ -204,21 +204,21 @@ public function print_toolbar() {
 						<ul class="pojo-a11y-toolbar-items pojo-a11y-links">
 							<?php if ( ! empty( $sitemap_link ) ) : ?>
 								<li class="pojo-a11y-toolbar-item">
-									<a href="<?php echo esc_attr( $sitemap_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-sitemap" tabindex="-1" role="button">
+									<a href="<?php echo esc_url( $sitemap_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-sitemap" tabindex="-1" role="button">
 										<?php echo $this->get_toolbar_button_title( 'sitemap' ); ?>
 									</a>
 								</li>
 							<?php endif; ?>
 							<?php if ( ! empty( $help_link ) ) : ?>
 								<li class="pojo-a11y-toolbar-item">
-									<a href="<?php echo esc_attr( $help_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-help" tabindex="-1" role="button">
+									<a href="<?php echo esc_url( $help_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-help" tabindex="-1" role="button">
 										<?php echo $this->get_toolbar_button_title( 'help' ); ?>
 									</a>
 								</li>
 							<?php endif; ?>
 							<?php if ( ! empty( $feedback_link ) ) : ?>
 								<li class="pojo-a11y-toolbar-item">
-									<a href="<?php echo esc_attr( $feedback_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-feedback" tabindex="-1" role="button">
+									<a href="<?php echo esc_url( $feedback_link ); ?>" class="pojo-a11y-toolbar-link pojo-a11y-link-feedback" tabindex="-1" role="button">
 										<?php echo $this->get_toolbar_button_title( 'feedback' ); ?>
 									</a>
 								</li>
 
@@ -54,6 +54,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable'         => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_toolbar_display' ],
 		];
 
 		$toolbar_options_classes = 'pojo-a11y-toolbar-button';
@@ -65,6 +66,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'desc'  => __( 'Title top of the toolbar (recommended).', 'pojo-accessibility' ),
 			'class' => $toolbar_options_classes,
 			'std'   => __( 'Accessibility Tools', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -77,6 +79,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -85,6 +88,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row no-border',
 			'std'   => __( 'Increase Text', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -93,6 +97,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Decrease Text', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -105,6 +110,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -113,6 +119,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Grayscale', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -125,6 +132,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -133,6 +141,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'High Contrast', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -145,6 +154,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -153,6 +163,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Negative Contrast', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -165,6 +176,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -173,6 +185,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Light Background', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -185,6 +198,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -193,6 +207,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Links Underline', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -205,6 +220,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -213,6 +229,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'   => __( 'Readable Font', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -221,17 +238,18 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes,
 			'std'   => __( 'Sitemap', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
 			'id'          => 'pojo_a11y_toolbar_button_sitemap_link',
 			'title'       => __( 'Sitemap Link', 'pojo-accessibility' ),
 			'type'        => self::FIELD_TEXT,
 			'placeholder' => 'https://your-domain.com/sitemap',
-			'desc'        => __( 'Link for sitemap page in your website. Leave blank to disable.',
-				'pojo-accessibility' ),
+			'desc'        => __( 'Link for sitemap page in your website. Leave blank to disable.', 'pojo-accessibility' ),
 			'class'       => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'         => '',
+			'sanitize_callback' => 'sanitize_url',
 		];
 
 		$fields[] = [
@@ -240,6 +258,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes,
 			'std'   => __( 'Help', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -250,6 +269,7 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'desc'        => __( 'Link for help page in your website. Leave blank to disable.', 'pojo-accessibility' ),
 			'class'       => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'         => '',
+			'sanitize_callback' => 'sanitize_url',
 		];
 
 		$fields[] = [
@@ -258,17 +278,18 @@ public function section_a11y_toolbar( $sections = [] ) {
 			'type'  => self::FIELD_TEXT,
 			'class' => $toolbar_options_classes,
 			'std'   => __( 'Feedback', 'pojo-accessibility' ),
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
 			'id'          => 'pojo_a11y_toolbar_button_feedback_link',
 			'title'       => __( 'Feedback Link', 'pojo-accessibility' ),
 			'type'        => self::FIELD_TEXT,
 			'placeholder' => 'https://your-domain.com/feedback',
-			'desc'        => __( 'Link for feedback page in your website. Leave blank to disable.',
-				'pojo-accessibility' ),
+			'desc'        => __( 'Link for feedback page in your website. Leave blank to disable.', 'pojo-accessibility' ),
 			'class'       => $toolbar_options_classes . ' pojo-settings-child-row',
 			'std'         => '',
+			'sanitize_callback' => 'sanitize_url',
 		];
 
 		$sections[] = [
@@ -305,6 +326,7 @@ public function section_a11y_settings( $sections ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'disable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -317,6 +339,7 @@ public function section_a11y_settings( $sections ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -325,6 +348,7 @@ public function section_a11y_settings( $sections ) {
 			'placeholder' => 'content',
 			'type'        => self::FIELD_TEXT,
 			'std'         => 'content',
+			'sanitize_callback' => 'sanitize_text_field',
 		];
 
 		$fields[] = [
@@ -338,32 +362,33 @@ public function section_a11y_settings( $sections ) {
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'disable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
 			'id'      => 'pojo_a11y_add_role_links',
 			'title'   => __( 'Add landmark roles to all links', 'pojo-accessibility' ),
 			'type'    => self::FIELD_SELECT,
-			'desc'    => __( 'This option will add <code>role="link"</code> to all links on the page.',
-				'pojo-accessibility' ),
+			'desc'    => __( 'This option will add <code>role="link"</code> to all links on the page.', 'pojo-accessibility' ),
 			'options' => [
 				'enable'  => __( 'Enable', 'pojo-accessibility' ),
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
 			'id'      => 'pojo_a11y_save',
 			'title'   => __( 'Sitewide Accessibility', 'pojo-accessibility' ),
-			'desc'    => __( 'Consistent accessibility throughout your site visit. Site remembers you and stays accessible.',
-				'pojo-accessibility' ),
+			'desc'    => __( 'Consistent accessibility throughout your site visit. Site remembers you and stays accessible.', 'pojo-accessibility' ),
 			'type'    => self::FIELD_SELECT,
 			'options' => [
 				'enable'  => __( 'Enable', 'pojo-accessibility' ),
 				'disable' => __( 'Disable', 'pojo-accessibility' ),
 			],
 			'std'     => 'enable',
+			'sanitize_callback' => [ $this, 'sanitize_enabled_disabled' ],
 		];
 
 		$fields[] = [
@@ -382,6 +407,7 @@ public function section_a11y_settings( $sections ) {
 				'720' => __( '1 Month', 'pojo-accessibility' ),
 			],
 			'std'     => '12',
+			'sanitize_callback' => [ $this, 'sanitize_expiration' ],
 		];
 
 		$sections[] = [
@@ -544,6 +570,30 @@ public static function field_html( $input ) {
 		return stripslashes( wp_filter_post_kses( addslashes( $input ) ) );
 	}
 
+	public function sanitize_toolbar_display( $input ) {
+		if ( empty( $input ) ) {
+			return $input;
+		}
+
+		return in_array( $input, [ 'enable', 'visible-desktop', 'visible-tablet', 'visible-phone', 'hidden-desktop', 'hidden-tablet', 'hidden-phone', 'disable' ] ) ? $input : 'enable';
+	}
+
+	public function sanitize_enabled_disabled( $input ) {
+		if ( empty( $input ) ) {
+			return $input;
+		}
+
+		return in_array( $input, [ 'enable', 'disable' ] ) ? $input : '';
+	}
+
+	public function sanitize_expiration( $input ) {
+		if ( empty( $input ) ) {
+			$input = [];
+		}
+
+		return in_array( $input, [ '1' , '6' , '12', '24', '48', '72' , '168', '720' ] ) ? $input : '12';
+	}
+
 	public static function field_checkbox_list( $input ) {
 		if ( empty( $input ) ) {
 			$input = [];
-Original file line number
+Diff line change
 .vscode
 .env
 *.zip
 +.qodo