From 247f3d4d267c13045e687a4ca6cf8f987a4132c5 Mon Sep 17 00:00:00 2001
From: nobu <big-me@n-k-y.net>
Date: Sat, 19 Jun 2021 10:42:20 +0900
Subject: [PATCH] =?UTF-8?q?WP=5FPLUGIN=E3=80=80=E3=83=91=E3=82=B9=E3=83=AF?=
 =?UTF-8?q?=E3=83=BC=E3=83=89=E4=BF=9D=E8=AD=B7=E3=83=9A=E3=83=BC=E3=82=B8?=
 =?UTF-8?q?=E3=81=AE=E3=83=86=E3=82=AD=E3=82=B9=E3=83=88=E5=A4=89=E6=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

・エスケープ処理変更：esc_htmlからesc_attr
---
 convert-protection-text.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/convert-protection-text.php b/convert-protection-text.php
index 5044d3c..cc82204 100644
--- a/convert-protection-text.php
+++ b/convert-protection-text.php
@@ -77,21 +77,21 @@ class CNV_Protection_Text {
                         <th scope="row">メッセージ</th>
                         <td>
                             <textarea name="_cnv_protect_options[text]" rows="4"
-                                      cols="60"><?php echo esc_html( $show_text ); ?></textarea>
+                                      cols="60"><?php echo esc_attr( $show_text ); ?></textarea>
                         </td>
                     </tr>
                     <tr valign="top">
                         <th scope="row">ボタンラベル</th>
                         <td>
                             <input type="text" name="_cnv_protect_options[label]"
-                                   value="<?php echo esc_html( $show_label ); ?>">
+                                   value="<?php echo esc_attr( $show_label ); ?>">
                         </td>
                     </tr>
                     <tr valign="top">
                         <th scope="row">ボタン名</th>
                         <td>
                             <input type="text" name="_cnv_protect_options[btn]"
-                                   value="<?php echo esc_html( $show_btn ); ?>">
+                                   value="<?php echo esc_attr( $show_btn ); ?>">
                         </td>
                     </tr>
                 </table>
@@ -131,7 +131,7 @@ class CNV_Protection_Text {
 
 		return '<form action="' . home_url() . '/wp-login.php?action=postpass" class="post-password-form" method="post">
 <p>' . nl2br( esc_html( $alert_text ) ) . '</p>
-<p><label for="pwbox">' . esc_html( $btn_label ) . '<input name="post_password" id="pwbox" type="password" size="20"></label> <input type="submit" name="Submit" value="' . esc_html( $btn_text ) . '"></p></form>';
+<p><label for="pwbox">' . esc_html( $btn_label ) . '<input name="post_password" id="pwbox" type="password" size="20"></label> <input type="submit" name="Submit" value="' . esc_attr( $btn_text ) . '"></p></form>';
 	}
 }