' . self::header( $title ); } /** * What FlitAgent's screens may print, for wp_kses(): the elements and attributes they use, plus `col` and `colgroup` for * the diff markup of older WordPress and the form attributes a field may need. No script, style, * frame, event handler or style attribute, and of the `data-` attributes only FlitAgent's own, with one exception: * `data-colname` on table cells. * * @return array> */ public static function allowed_html(): array { $common = array( 'class', 'id', 'role', 'hidden', 'aria-current', 'aria-disabled', 'aria-hidden', 'aria-label', 'aria-labelledby', 'aria-live' ); foreach ( array( 'autorun', 'connect', 'connect-again', 'copied', 'copy', 'copy-label', 'copy-select', 'copy-status', 'copy-text', 'dialog', 'dialog-open', 'nonce', 'open-tool', 'run', 'setup-tool', 'state', 'tab-done', 'tool', 'tool-status', 'view-nonce' ) as $name ) { $common[] = 'data-flitagent-' . $name; } $shape = array( 'fill', 'fill-rule', 'stroke', 'stroke-linecap', 'stroke-linejoin', 'stroke-width' ); $elements = array( 'a' => array( 'href', 'rel', 'target' ), 'br' => array(), 'button' => array( 'disabled', 'form', 'name', 'type', 'value' ), 'circle' => array_merge( $shape, array( 'cx', 'cy', 'r' ) ), 'code' => array( 'title' ), 'col' => array(), 'colgroup' => array(), 'dd' => array(), 'del' => array(), 'details' => array( 'open' ), 'dialog' => array( 'open' ), 'div' => array( 'tabindex' ), 'dl' => array(), 'dt' => array(), 'fieldset' => array(), 'form' => array( 'action', 'autocomplete', 'method' ), 'h1' => array(), 'h2' => array(), 'h3' => array(), 'header' => array(), 'hr' => array(), 'input' => array( 'autocomplete', 'checked', 'disabled', 'form', 'max', 'min', 'name', 'placeholder', 'readonly', 'type', 'value' ), 'ins' => array(), 'label' => array( 'for' ), 'legend' => array(), 'li' => array(), 'noscript' => array(), 'ol' => array(), 'option' => array( 'selected', 'value' ), 'p' => array(), 'path' => array_merge( $shape, array( 'd' ) ), 'pre' => array(), 'rect' => array_merge( $shape, array( 'height', 'rx', 'ry', 'width', 'x', 'y' ) ), 'section' => array(), 'select' => array( 'name' ), 'span' => array( 'title' ), 'strong' => array(), 'summary' => array(), 'svg' => array_merge( $shape, array( 'focusable', 'height', 'viewbox', 'width', 'xmlns' ) ), 'table' => array(), 'tbody' => array(), // data-colname is the one data attribute that is not FlitAgent's own: core's list-tables.css reads it to label each // cell on a narrow screen. Screens::list_table() prints it, on table cells only, and it holds a column's label. 'td' => array( 'data-colname' ), 'th' => array( 'data-colname', 'scope' ), 'thead' => array(), 'tr' => array(), 'ul' => array(), 'wbr' => array(), ); $allowed = array(); foreach ( $elements as $element => $attributes ) { $allowed[ $element ] = array_fill_keys( array_merge( $common, $attributes ), true ); } return $allowed; } /** * The current user's one-time notice, then forgets it. * * @return string */ public static function notice_once(): string { $key = 'flitagent_notice_' . get_current_user_id(); $message = get_transient( $key ); if ( ! is_string( $message ) || '' === $message ) { return ''; } delete_transient( $key ); return '

' . esc_html( $message ) . '

'; } }