Add tiny editor support to content access message, change autoload wp_remote_get to WP_Filesystem_Direct

Author: Angelo Rocha

admin/classes/WPSSAdminFrontend.php

@@ -74,7 +74,7 @@ public static function render_template( array $template ): void {
 	 */
 	public static function sanitize_output(): array {
 		return [
-			'div'      => [ 'class' => [], 'id' => [] ],
+			'div'      => [ 'class' => [], 'id' => [], 'role' => [], 'aria-label' => [], 'aria-pressed' => [] ],
 			'table'    => [ 'class' => [], 'id' => [] ],
 			'thead'    => [ 'class' => [], 'id' => [] ],
 			'tr'       => [ 'class' => [], 'id' => [] ],
@@ -93,6 +93,8 @@ public static function sanitize_output(): array {
 			'h3'       => [ 'class' => [], 'id' => [] ],
 			'h4'       => [ 'class' => [], 'id' => [] ],
 			'u'        => [],
+			'i'        => [ 'class' => [], 'id' => [] ],
+			'link'     => [ 'rel' => [], 'href' => [], 'id' => [] ],
 			'small'    => [],
 			'pre'      => [],
 			'br'       => [],
@@ -109,20 +111,24 @@ public static function sanitize_output(): array {
 			'form'     => [ 'method' => [], 'action' => [], 'class' => [], 'id' => [] ],
 			'label'    => [ 'for' => [], 'class' => [], 'id' => [] ],
 			'input'    => [
-				'type'        => [],
-				'name'        => [],
-				'value'       => [],
-				'id'          => [],
-				'class'       => [],
-				'required'    => [],
-				'checked'     => [],
-				'placeholder' => [],
-				'title'       => [],
+				'type'          => [],
+				'name'          => [],
+				'value'         => [],
+				'id'            => [],
+				'class'         => [],
+				'required'      => [],
+				'checked'       => [],
+				'placeholder'   => [],
+				'title'         => [],
+				'autocomplete'  => [],
+				'aria-expanded' => [],
+				'aria-owns'     => [],
+				'style'         => [],
 			],
 			'select'   => [ 'name' => [], 'class' => [], 'id' => [], 'required' => [], 'onchange' => [], ],
 			'textarea' => [ 'name' => [], 'class' => [], 'id' => [], 'rows' => [], 'cols' => [] ],
 			'option'   => [ 'value' => [], 'selected' => [] ],
-			'button'   => [ 'type' => [], 'class' => [], 'id' => [] ],
+			'button'   => [ 'type' => [], 'class' => [], 'id' => [], 'role' => [], 'hidefocus' => [] ],
 		];
 	}
 

admin/classes/WPSSPluginSettings.php

@@ -67,7 +67,7 @@ public static function instance(): object {
 			foreach ( $settings as $key => $value ) {
 				if ( in_array( $key, $allow_keys ) ) {
 					if ( ! is_array( $value ) ) {
-						WPSSPluginHelper::update_option( $key, sanitize_text_field( $value ) );
+						WPSSPluginHelper::update_option( $key, wp_kses_post( $value ) );
 					} else {
 						$value = array_map( 'sanitize_text_field', $value );
 						WPSSPluginHelper::update_option( $key, wp_json_encode( $value ) );

admin/templates/settings-tab.php

@@ -119,7 +119,13 @@
     <label for="wpss_cpt_access_message">
 		<?php esc_html_e( 'Type a message to show when user no have access to content:', 'wpss-ultimate-user-management' ); ?>
     </label>
-    <textarea id="wpss_cpt_access_message" name="wpss_cpt_access_message" rows="5" cols="100"><?php echo wp_kses_post( $access_message ); ?></textarea>
+	<?php
+	$editor_config = [
+		'textarea_rows' => 5,
+		'quicktags'     => false,
+	];
+	wp_editor( wp_kses_post( $access_message ), 'wpss_cpt_access_message', $editor_config );
+	?>
     <hr>
     <strong>
 		<?php esc_html_e( 'Hide admin bar to this roles:', 'wpss-ultimate-user-management' ); ?>

autoload.php

@@ -15,8 +15,14 @@ function wpss_autoload( $dir ): void {
 		if ( !file_exists( "$dir/composer.json" ) ) {
 			return;
 		}
-		$composer   = wp_remote_get( WPSS_URCM_PLUGIN_URI . "composer.json" );
-		$composer   = wp_remote_retrieve_body( $composer );
+		if ( file_exists( ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php';
+		}
+		if ( file_exists( ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php';
+		}
+		$content    = new WP_Filesystem_Direct( false );
+		$composer   = $content->get_contents( WPSS_URCM_PLUGIN_PATH . "composer.json" );
 		$composer   = json_decode( $composer, true );
 		$namespaces = $composer['autoload']['psr-4'] ?? [];
 		foreach ( $namespaces as $namespace => $classpaths ) {

readme.txt

@@ -5,7 +5,7 @@ Tags: role, capabilities, user, widgets, permissions
 Requires at least: 6.1
 Tested up to: 6.6
 Requires PHP: 8.1
-Stable tag: 1.1.0
+Stable tag: 1.1.1
 License: GNU General Public License v3 or later
 License URI: /licence.txt
 

wpss-ultimate-user-management.php

@@ -8,7 +8,7 @@
  * Plugin Name:       WPSS Ultimate User Management
  * Plugin URI:        https://github.com/angelorocha/wpss-ultimate-user-management
  * Description:       Manage users, roles and capabilities more easily.
- * Version:           1.1.0
+ * Version:           1.1.1
  * Requires at least: 6.1
  * Requires PHP:      8.1
  * Author:            Angelo Rocha