Fixes for javascript problems

Hello,

I have fixed your plugin regarding user input, you need to escape string in gAnnounce/gAnnounce.php as follows :
$Ann = $Ann . "['','".$data->gNews_text."',''],";
should become :
$Ann = $Ann . "['','".esc_js($data->gNews_text)."',''],";

Currently there are javascript errors in page according to user input.

You need to add additional esc_html and esc_js as well in the same file.

Kind Regards, Fran?ois Pons.

• This topic was modified 6 years, 10 months ago by aytechnet.
• This topic was modified 6 years, 10 months ago by aytechnet.