Skip to content

Sanitized tags to prevent XSS - #980

Open
girishpanchal30 wants to merge 2 commits into
developmentfrom
bugfix/themeisle/2058
Open

Sanitized tags to prevent XSS#980
girishpanchal30 wants to merge 2 commits into
developmentfrom
bugfix/themeisle/2058

Conversation

@girishpanchal30

Copy link
Copy Markdown
Contributor

Summary

Sanitize the Beaver Builder pricing table's title and subtitle to prevent XSS.

Check before Pull Request is ready:

Closes https://github.com/Codeinwp/themeisle/issues/2058

@pirate-bot pirate-bot added the pr-checklist-complete The Pull Request checklist is complete. (automatic label) label Jul 29, 2026
@girishpanchal30
girishpanchal30 requested a review from Copilot July 29, 2026 07:14
@pirate-bot

pirate-bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Plugin build for e533837 is ready 🛎️!

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Sanitizes Beaver Builder pricing-table heading tags to prevent XSS.

Changes:

  • Adds allow-list tag sanitization.
  • Applies sanitization during frontend rendering.
  • Adds unit tests and stabilizes administrator test setup.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
obfx_modules/beaver-widgets/inc/common-functions.php Adds the tag sanitizer.
obfx_modules/beaver-widgets/modules/pricing-table/includes/frontend.php Sanitizes title and subtitle tags.
tests/test-module-beaver-widgets.php Adds sanitizer and rendering tests.
tests/test-module-post-duplicator.php Restores the administrator before each test.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread tests/test-module-beaver-widgets.php
Comment thread obfx_modules/beaver-widgets/inc/common-functions.php Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-checklist-complete The Pull Request checklist is complete. (automatic label)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants