Commit e9ce7aa5 authored by Jakob Moser's avatar Jakob Moser
Browse files

Add intval as additional sanitization step

parent 46316608

functions.php

+2 −2
Original line number Diff line number Diff line
@@ -40,8 +40,8 @@ add_filter('upload_mimes', 'fscoli_mime_types', 1, 1); 
 * https://developer.wordpress.org/reference/classes/wp_embed/get_embed_handler_html/

 */

function fscoli_embed_umap($regex_matches, $embed_attrs, $url, $raw_embed_attrs) {

    $width = esc_attr($embed_attrs['width'].'px');

    $height = esc_attr($embed_attrs['height'].'px');

    $width = esc_attr(intval($embed_attrs['width']).'px');

    $height = esc_attr(intval($embed_attrs['height']).'px');

    $url = esc_url($url);

    return <<<HTML

        <iframe src="$url" style="width: $width; height: $height" allow="fullscreen"></iframe>