Escape wc_help_tip output

This commit is contained in:
Justin Palmer 2023-11-13 15:20:08 +01:00
parent f64e4a5100
commit c9bea33598
No known key found for this signature in database
GPG Key ID: ACAB7C35AA2577AF
1 changed files with 10 additions and 6 deletions

View File

@ -26,9 +26,11 @@ defined( 'ABSPATH' ) || exit;
<h4>
<?php
esc_html_e( 'Total orders', 'woocommerce' );
echo wc_help_tip(
__( 'Total number of orders for this customer, including the current one.', 'woocommerce' )
); // phpcs:ignore WordPress.XSS.EscapeOutput.OutputNotEscaped
echo wp_kses_post(
wc_help_tip(
__( 'Total number of orders for this customer, including the current one.', 'woocommerce' )
)
);
?>
</h4>
@ -39,9 +41,11 @@ defined( 'ABSPATH' ) || exit;
<h4>
<?php
esc_html_e( 'Total revenue', 'woocommerce' );
echo wc_help_tip(
__( "This is the Customer Lifetime Value, or the total amount you have earned from this customer's orders.", 'woocommerce' )
); // phpcs:ignore WordPress.XSS.EscapeOutput.OutputNotEscaped
echo wp_kses_post(
wc_help_tip(
__( "This is the Customer Lifetime Value, or the total amount you have earned from this customer's orders.", 'woocommerce' )
)
);
?>
</h4>
<span class="order-source-attribution-total-spend">