From cb2fd710d8b65cb1e9590f1b89edef3af97b3c62 Mon Sep 17 00:00:00 2001
From: sagarb <sagarb@bsf.io>
Date: Fri, 16 Oct 2020 14:41:43 +0530
Subject: [PATCH 1/2] Hardened the security.

---
 .../includes/frontend.php                     | 76 +++++++++----------
 bb-bootstrap-alerts.php                       |  2 +-
 readme.txt                                    |  5 +-
 3 files changed, 43 insertions(+), 40 deletions(-)

diff --git a/bb-bootstrap-alerts-module/includes/frontend.php b/bb-bootstrap-alerts-module/includes/frontend.php
index f1dd3a7..5bfdae0 100644
--- a/bb-bootstrap-alerts-module/includes/frontend.php
+++ b/bb-bootstrap-alerts-module/includes/frontend.php
@@ -1,50 +1,50 @@
 <!-- Bootstrap alert start -->
 <?php $name = 'bbba-'.$module->node; ?>
  <?php $is_enable=true; ?>
-<?php if( ! FLBuilderModel::is_builder_active() ) { ?>
-	<?php if( isset( $_COOKIE[$name] ) && $_COOKIE[$name] != null ):
-		$is_enable=false;
-	endif ?>
-<?php  } ?>
-<?php if( $is_enable ): ?>
+<?php if(! FLBuilderModel::is_builder_active() ) : ?>
+    <?php if(isset($_COOKIE[$name]) && $_COOKIE[$name] != null ) :
+        $is_enable=false;
+    endif ?>
+<?php  endif ?>
+<?php if($is_enable ) : ?>
 <div class="bb-bootstrap-alerts">
 
-	<!-- Navigation Link -->
-	<?php if($settings->bbn_dropdown_link=='yes'): ?>
-		<a href="<?php echo ($nav_link=$settings->bbn_navigation_link != '')? $nav_link=$settings->bbn_navigation_link : '#' ;?>" target="<?php echo $nav_target=$settings->bbn_navigation_target;?>" >
-	<?php endif; ?>
-			<!-- Alert class -->
-			<div class="alert <?php echo $settings->bbn_dropdown_field; ?> fade in" >
-				<!-- Close Button -->
-				<?php if( $settings->bbn_closable == 'yes' ): ?>
-					<span class="close" data-dismiss="alert" aria-label="close"><i class="fa fa-times" aria-hidden="true"></i></span>
-				<?php endif; ?>
+    <!-- Navigation Link -->
+    <?php if($settings->bbn_dropdown_link=='yes') : ?>
+        <a href="<?php echo ($nav_link=$settings->bbn_navigation_link != '')? esc_url($nav_link=$settings->bbn_navigation_link) : '#' ;?>" target="<?php echo esc_attr($nav_target=$settings->bbn_navigation_target);?>" >
+    <?php endif; ?>
+            <!-- Alert class -->
+            <div class="alert <?php echo esc_attr($settings->bbn_dropdown_field); ?> fade in" >
+                <!-- Close Button -->
+                <?php if($settings->bbn_closable == 'yes' ) : ?>
+                    <span class="close" data-dismiss="alert" aria-label="close"><i class="fa fa-times" aria-hidden="true"></i></span>
+                <?php endif; ?>
 
-				<!-- Alert contents -->
-	    		<span class="bbn_information ">
-	    			<div class="alert-padding">
+                <!-- Alert contents -->
+                <span class="bbn_information ">
+                    <div class="alert-padding">
 
-	    			<!-- Before text icon -->
-	    			<?php if( $settings->bbn_icon_align == 'before' ): ?>
-						<i class="<?php echo $settings->bbn_icon_field; ?>"></i>
-					<?php endif; ?>
+                    <!-- Before text icon -->
+                    <?php if($settings->bbn_icon_align == 'before' ) : ?>
+                        <i class="<?php echo esc_attr($settings->bbn_icon_field); ?>"></i>
+                    <?php endif; ?>
 
-					<!-- Alert Contents -->
-	    			<?php echo $settings->bbn_textarea_field; ?>
+                    <!-- Alert Contents -->
+                    <?php echo $settings->bbn_textarea_field; ?>
 
-	    			<!-- After text icon -->
-	    			<?php if( $settings->bbn_icon_align == 'after' ): ?>
-	    				<i class="<?php echo $settings->bbn_icon_field; ?>"></i>
-					<?php endif; ?>
+                    <!-- After text icon -->
+                    <?php if($settings->bbn_icon_align == 'after' ) : ?>
+                        <i class="<?php echo esc_attr($settings->bbn_icon_field); ?>"></i>
+                    <?php endif; ?>
 
-					</div>
-	    		</span>
-	    	</div>
-	<!-- Navigation Link Close-->  	
-	<?php if($settings->bbn_dropdown_link=='yes'): ?>
-		</a>
-	<?php endif; ?>
-	
+                    </div>
+                </span>
+            </div>
+    <!-- Navigation Link Close-->      
+    <?php if($settings->bbn_dropdown_link=='yes') : ?>
+        </a>
+    <?php endif; ?>
+    
 </div> 
 <!-- Bootstrap alert end -->
-<?php endif ?>
\ No newline at end of file
+<?php endif ?>
diff --git a/bb-bootstrap-alerts.php b/bb-bootstrap-alerts.php
index 8fef6e8..cd33483 100644
--- a/bb-bootstrap-alerts.php
+++ b/bb-bootstrap-alerts.php
@@ -3,7 +3,7 @@
  * Plugin Name: Alerts for Beaver Builder
  * Plugin URI: http://www.brainstormforce.com
  * Description: This is the plugin to create predefined alert messages.
- * Version: 1.2.1
+ * Version: 1.2.2
  * Author: Brainstorm Force
  * Author URI: https://www.brainstormforce.com/
  * Text Domain: bb-bootstrap-alerts
diff --git a/readme.txt b/readme.txt
index 296b0df..de58c26 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,7 +3,7 @@ Contributors: brainstormforce
 Donate link: https://www.paypal.me/BrainstormForce
 Requires at least: 4.4
 Tags: beaver builder, page builder plugin, alerts, notification, bootstrap, drag and drop alerts, bb bootstrap, bb alerts, bb notification
-Stable tag: 1.2.1
+Stable tag: 1.2.2
 Tested up to: 5.5
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -76,6 +76,9 @@ Visit our website to know more about the top WordPress products and services we
 
 == Changelog ==
 
+= 1.2.2 =
+- Improvement: Hardened the security.
+
 = 1.2.1 =
 - Fix: PHP illegal warnings and notices for font family and font weight
 

From 4dbea910642cdfe167d72174f4b0b8a8a1d185a6 Mon Sep 17 00:00:00 2001
From: sagarb <sagarb@bsf.io>
Date: Fri, 16 Oct 2020 14:55:08 +0530
Subject: [PATCH 2/2] Hardened the security.

---
 bb-bootstrap-alerts-module/includes/frontend.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bb-bootstrap-alerts-module/includes/frontend.php b/bb-bootstrap-alerts-module/includes/frontend.php
index 5bfdae0..bd535eb 100644
--- a/bb-bootstrap-alerts-module/includes/frontend.php
+++ b/bb-bootstrap-alerts-module/includes/frontend.php
@@ -4,8 +4,8 @@
 <?php if(! FLBuilderModel::is_builder_active() ) : ?>
     <?php if(isset($_COOKIE[$name]) && $_COOKIE[$name] != null ) :
         $is_enable=false;
-    endif ?>
-<?php  endif ?>
+	endif; ?>
+<?php  endif; ?>
 <?php if($is_enable ) : ?>
 <div class="bb-bootstrap-alerts">
 
@@ -47,4 +47,4 @@
     
 </div> 
 <!-- Bootstrap alert end -->
-<?php endif ?>
+<?php endif; ?>