'; $html .= '
'; foreach ( $buttons as $button ) { $html .= AyudaWP_AISS_Buttons::ayudawp_get_button_html( $button, $url, $title, $options, true, 'icons-only', 'link' ); } $html .= '
'; /* * Every attribute above and inside ayudawp_get_button_html() is escaped * where it is written. The wp_kses() pass on top is defence in depth * and keeps the file free of security-sniff suppressions: the allowlist * in ayudawp_aiss_kses_buttons() covers exactly the markup the button * builder produces, so anything else would be dropped here instead of * printed. */ echo wp_kses( $html, ayudawp_aiss_kses_buttons() ); } }