Files
wordpress/wp-content/themes/twentytwentyone/inc/custom-css.php
Sergey Biryukov 0cbb3f5744 Twenty Twenty-One: Remove EscapeOutput annotations.
These are from the `WordPress-Extra` standard, which is not included in the `phpcs.xml.dist` configuration (the repository uses `WordPress-Core`).

Includes removing unnecessary `WPThemeReview` annotations carried over from upstream.

Follow-up to [49216].

Props rodrigosprimo.
See #64627.
Built from https://develop.svn.wordpress.org/trunk@61654


git-svn-id: http://core.svn.wordpress.org/trunk@60965 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2026-02-16 22:38:42 +00:00

43 lines
1.1 KiB
PHP

<?php
/**
* Custom CSS
*
* @package WordPress
* @subpackage Twenty_Twenty_One
* @since Twenty Twenty-One 1.0
*/
/**
* Generates CSS.
*
* @since Twenty Twenty-One 1.0
*
* @param string $selector The CSS selector.
* @param string $style The CSS style.
* @param string $value The CSS value.
* @param string $prefix The CSS prefix.
* @param string $suffix The CSS suffix.
* @param bool $display Print the styles.
* @return string Generated CSS.
*/
function twenty_twenty_one_generate_css( $selector, $style, $value, $prefix = '', $suffix = '', $display = true ) {
// Bail early if there is no $selector elements or properties and $value.
if ( ! $value || ! $selector ) {
return '';
}
$css = sprintf( '%s { %s: %s; }', $selector, $style, $prefix . $value . $suffix );
if ( $display ) {
/*
* Note to reviewers: $css contains auto-generated CSS.
* It is included inside <style> tags and can only be interpreted as CSS on the browser.
* Using wp_strip_all_tags() here is sufficient escaping to avoid
* malicious attempts to close </style> and open a <script>.
*/
echo wp_strip_all_tags( $css );
}
return $css;
}