HEX
Server: Apache
System: Linux WWW 6.1.0-40-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.153-1 (2025-09-20) x86_64
User: web11 (1011)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /var/www/vfconf/wp-content/plugins/gutentor/includes/functions/sanitize.php
<?php
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! function_exists( 'gutentor_sanitize_color' ) ) :
	/**
	 * Color sanitization callback
	 * https://wordpress.stackexchange.com/questions/257581/escape-hexadecimals-rgba-values
	 *
	 * @since 1.0.0
	 */
	function gutentor_sanitize_color( $color ) {
		if ( empty( $color ) || is_array( $color ) ) {
			return '';
		}

		// If string does not start with 'rgba', then treat as hex.
		// sanitize the hex color and finally convert hex to rgba
		if ( false === strpos( $color, 'rgba' ) ) {
			return sanitize_hex_color( $color );
		}

		// By now we know the string is formatted as an rgba color so we need to further sanitize it.
		$color = str_replace( ' ', '', $color );
		sscanf( $color, 'rgba(%d,%d,%d,%f)', $red, $green, $blue, $alpha );

		return 'rgba(' . $red . ',' . $green . ',' . $blue . ',' . $alpha . ')';
	}
endif;

if ( ! function_exists( 'gutentor_sanitize_field_background' ) ) :

	/**
	 * Sanitize Field Background
	 *
	 * @since Gutentor 1.0.0
	 *
	 * @param $input
	 * @return array
	 */
	function gutentor_sanitize_field_background( $input, $gutentor_setting ) {

		$input_decoded = json_decode( $input, true );
		$output        = array();

		if ( ! empty( $input_decoded ) ) {
			foreach ( $input_decoded as $key => $value ) {

				switch ( $key ) :
					case 'background-size':
					case 'background-position':
					case 'background-repeat':
					case 'background-attachment':
						$output[ $key ] = sanitize_key( $value );
						break;

					case 'background-image':
						$output[ $key ] = esc_url_raw( $value );
						break;
					case 'background-color':
					case 'background-hover-color':
					case 'background-color-title':
					case 'title-font-color':
					case 'background-color-post':
					case 'site-title-color':
					case 'site-tagline-color':
					case 'post-font-color':
					case 'text-color':
					case 'text-hover-color':
					case 'title-color':
					case 'link-color':
					case 'link-hover-color':
					case 'on-sale-bg':
					case 'on-sale-color':
					case 'out-of-stock-bg':
					case 'out-of-stock-color':
					case 'rating-color':
					case 'grid-list-color':
					case 'grid-list-hover-color':
					case 'categories-color':
					case 'categories-hover-color':
					case 'deleted-price-color':
					case 'deleted-price-hover-color':
					case 'price-color':
					case 'price-hover-color':
					case 'content-color':
					case 'content-hover-color':
					case 'tab-list-color':
					case 'tab-content-color':
					case 'tab-list-border-color':
					case 'tab-content-border-color':
					case 'background-stripped-color':
					case 'button-color':
					case 'button-hover-color':
					case 'icon-color':
					case 'icon-hover-color':
					case 'meta-color':
					case 'next-prev-color':
					case 'next-prev-hover-color':
					case 'button-bg-color':
					case 'button-bg-hover-color':
						$output[ $key ] = gutentor_sanitize_color( $value );
						break;
					default:
						$output[ $key ] = sanitize_text_field( $value );
						break;
				endswitch;
			}
			return wp_json_encode( $output );
		}
		return $input;
	}
endif;

if ( ! function_exists( 'gutentor_sanitize_checkbox' ) ) :
	/*
	 * Boolean check.
	 * @since 2.1.0
	 */
	function gutentor_sanitize_checkbox( $checked ) {
		return ( ( isset( $checked ) && true == $checked ) ? true : false );
	}
endif;

if ( ! function_exists( 'gutentor_sanitize_array' ) ) :
	/*
	 * Array check.
	 * @since 2.1.0
	 */
	function gutentor_sanitize_array( $checked ) {
		return is_array( $checked ) ? $checked : array();
	}
endif;


/* Validation */
if ( ! function_exists( 'gutentor_get_allowed_text_tags' ) ) :
	/**
	 * Get valid text tags
	 *
	 * @see src\global-components\i18n\options.js
	 *
	 * @since 3.3.6
	 * @access public
	 *
	 * @return array valid text tags.
	 */
	function gutentor_get_allowed_text_tags() {
		return apply_filters( 'gutentor_get_allowed_text_tags', array( 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'p', 'div', 'span' ) );
	}
endif;

if ( ! function_exists( 'gutentor_get_title_tag' ) ) :
	/**
	 * Get valid title tag
	 *
	 * @since 3.3.6
	 * @access public
	 *
	 * @param string $title_tag Title tag.
	 * @return string valid title tag.
	 */
	function gutentor_get_title_tag( $title_tag ) {
		$allowed_tags = gutentor_get_allowed_text_tags();
		if ( in_array( $title_tag, $allowed_tags, true ) ) {
			return $title_tag;
		} else {
			return 'h3';
		}
	}
endif;

if ( ! function_exists( 'gutentor_get_allowed_module_tags' ) ) :
	/**
	 * Get valid module tags
	 *
	 * @see src\global-components\i18n\options.js
	 *
	 * @since 3.3.6
	 * @access public
	 *
	 * @return array valid module tags.
	 */
	function gutentor_get_allowed_module_tags() {
		return apply_filters( 'gutentor_get_allowed_module_tags', array( 'section', 'div', 'header', 'footer', 'main', 'article', 'aside' ) );
	}
endif;

if ( ! function_exists( 'gutentor_get_module_tag' ) ) :
	/**
	 * Get valid module tag
	 *
	 * @since 3.3.6
	 * @access public
	 *
	 * @param string $tag Module tag.
	 * @return string valid module tag.
	 */
	function gutentor_get_module_tag( $tag ) {
		$allowed_tags = gutentor_get_allowed_module_tags();
		if ( in_array( $tag, $allowed_tags, true ) ) {
			return $tag;
		} else {
			return 'div';
		}
	}
endif;



if ( ! function_exists( 'gutentor_esc_svg' ) ) :

	/**
	 * Escape for SVG HTML
	 *
	 * @since 3.4.4
	 * @param string $svg_html HTML.
	 * @return string escaped HTML
	 * @author codersantosh <codersantosh@gmail.com>
	 */
	function gutentor_esc_svg( $svg_html ) {

		$allowed_html = array(
			'svg'            => array(
				'xmlns'               => array(),
				'fill'                => array(),
				'viewbox'             => array(),
				'role'                => array(),
				'aria-hidden'         => array(),
				'focusable'           => array(),
				'height'              => array(),
				'width'               => array(),
				'xmlns:xlink'         => array(),
				'id'                  => array(),
				'class'               => array(),
				'style'               => array(),
				'transform'           => array(),
				'opacity'             => array(),
				'preserveaspectratio' => array(),
			),
			'path'           => array(
				'd'               => array(),
				'fill'            => array(),
				'stroke'          => array(),
				'stroke-width'    => array(),
				'stroke-linecap'  => array(),
				'stroke-linejoin' => array(),
				'id'              => array(),
				'class'           => array(),
				'style'           => array(),
				'transform'       => array(),
				'opacity'         => array(),
			),
			'lineargradient' => array(
				'gradientunits'     => array(),
				'gradienttransform' => array(),
				'spreadmethod'      => array(),
				'x1'                => array(),
				'y1'                => array(),
				'x2'                => array(),
				'y2'                => array(),
				'id'                => array(),
				'class'             => array(),
				'style'             => array(),
				'transform'         => array(),
				'opacity'           => array(),
			),
			'stop'           => array(
				'offset'       => array(),
				'stop-color'   => array(),
				'stop-opacity' => array(),
				'id'           => array(),
				'class'        => array(),
				'style'        => array(),
				'transform'    => array(),
				'opacity'      => array(),
			),
			'g'              => array(
				'id'        => array(),
				'class'     => array(),
				'style'     => array(),
				'transform' => array(),
				'opacity'   => array(),
			),
			'text'           => array(
				'x'           => array(),
				'y'           => array(),
				'dy'          => array(),
				'text-anchor' => array(),
				'font-family' => array(),
				'font-size'   => array(),
				'font-weight' => array(),
				'fill'        => array(),
				'id'          => array(),
				'class'       => array(),
				'style'       => array(),
				'transform'   => array(),
				'opacity'     => array(),
			),
			'tspan'          => array(
				'id'        => array(),
				'class'     => array(),
				'style'     => array(),
				'transform' => array(),
				'opacity'   => array(),
			),
		);

		return wp_kses( $svg_html, $allowed_html );
	}
endif;